Integrate with System Development Methodology ISSEP Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A systems engineering team is designing a new autonomous vehicle control system. They need to analyze how the system behaves under various cyber-attack scenarios before any physical hardware is built. Which approach best supports this analysis?

   • ABuilding a physical prototype and conducting penetration testing
   • BReviewing the system's documentation for security features
   • CWaiting until the system is fully deployed and then conducting a security audit
   • DCreating a formal model of the system and running simulations with attack scenarios
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is deploying a new application on a cloud platform using serverless functions. The security team wants assurance that the serverless functions are free from vulnerabilities and that the configuration is secure. Which combination of assurance methods is most appropriate?

   • AOnly reviewing the cloud provider's security whitepapers
   • BConducting a network penetration test of the cloud provider's infrastructure
   • CPerforming a physical security assessment of the cloud data center
   • DStatic code analysis of the function code and automated configuration review of the cloud environment
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which security activity is typically performed during the design phase of the system development life cycle?

   • AThreat modeling
   • BSecurity requirements elicitation
   • CPenetration testing
   • DIncident response
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A systems engineering organization is adopting ISO/IEC 24641:2023 as its standard for systems and software engineering processes. The organization wants to ensure that security is integrated throughout the system life cycle, not treated as a separate activity. Which principle of ISO/IEC 24641:2023 directly supports this goal?

   • AIntegrating security considerations into every technical process, from concept to disposal
   • BPerforming a single security assessment at the end of the development process
   • CDelegating all security decisions to a separate security team
   • DFocusing security efforts only on the implementation phase
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A systems engineering team is using model-based systems engineering (MBSE) to design a new network intrusion detection system. They want to verify that the system's security properties, such as confidentiality and integrity, are maintained under various attack scenarios. Which MBSE capability is most relevant for this verification?

   • ACreating a static architectural diagram of the system
   • BUsing the model to automatically generate code
   • CGenerating documentation from the model
   • DSimulation of the system model under attack scenarios to observe security behavior
   Reveal Solution Discussion Select an answer first