Execute Systems Security Engineering Processes (e.g., Hardware, Software, Data) ISSEP Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   What is a primary security benefit of modular design in systems engineering?

   • AIt guarantees that a vulnerability in one module cannot affect the rest of the system
   • BIt allows security controls to be isolated and tested independently
   • CIt eliminates the need for any security testing
   • DIt ensures that all components share the same security implementation
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A systems security engineer is designing a new access control system for a multi-tenant cloud platform. The design uses a modular approach where the authentication module, authorization module, and audit logging module are separate services. The engineer is evaluating the impact of this modularity on security testing. Which statement best describes the testing implication?

   • AModularity reduces the need for security testing because each module is smaller and simpler.
   • BModularity increases the testing effort because each module must be tested against all possible inputs.
   • CEach module can be tested in isolation, but integration testing is still required to verify secure interactions between modules.
   • DThe modules can be tested independently, and no integration testing is needed because the interfaces are well-defined.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which activity is a key part of assessing a system's compliance with a security standard?

   • AEnsuring the system uses proprietary encryption algorithms
   • BConfirming that the system has no security controls at all
   • CVerifying that the system is connected to the internet
   • DReviewing the system's design and implementation against the standard's control requirements
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does modular design impact the security engineering process?

   • AIt requires all modules to be identical in design
   • BIt prevents any changes to the system after deployment
   • CIt makes the system more complex and harder to secure
   • DIt allows security requirements to be allocated to specific modules
   Reveal Solution Discussion Select an answer first