Perform Technical Management ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary goal of quality assurance (QA) in security engineering?

   • ATo ensure that security products and services meet specified requirements and standards
   • BTo speed up the development process
   • CTo increase the number of security features
   • DTo reduce the cost of security tools
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of configuration management (CM) in a security engineering context?

   • ATo develop the organization's security awareness training program
   • BTo assign security clearances to system users
   • CTo establish and maintain the integrity of security-relevant system components and documentation
   • DTo monitor network traffic for malicious activity
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   During the planning phase of a project, what is a primary responsibility of a systems security engineer?

   • AAssigning project tasks to team members and monitoring their daily progress
   • BDefining the security requirements and constraints that must be incorporated into the project plan
   • CApproving the project budget and allocating financial resources
   • DConducting the final user acceptance testing of the delivered system
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security engineering team is developing a new authentication system for a high-security government application. The system must meet strict security requirements, including the use of multi-factor authentication (MFA) and hardware security modules (HSMs). The team is using an agile development methodology, with frequent releases. The security engineer is responsible for ensuring the system meets its security requirements. What is the most effective way for the security engineer to ensure quality in this agile environment?

   • ADefer all security testing to an external third-party auditor at the end of the project.
   • BRely on the development team to conduct their own security testing, as they are most familiar with the code.
   • CConduct a single, comprehensive security test at the end of the project, before the final release.
   • DIntegrate security testing into each sprint, ensuring that security is considered throughout the development process.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security engineering team is developing a new cryptographic module. To ensure the module meets its specified security requirements, the team plans to conduct a formal verification. Which of the following is the most appropriate QA activity?

   • AUsing a formal methods tool to mathematically prove that the module's implementation matches its specification.
   • BHaving a second developer independently re-implement the module and compare the outputs.
   • CTesting the module against a set of known test vectors.
   • DReviewing the source code for common coding errors.
   Reveal Solution Discussion Select an answer first