Architecture Principles
Questions 1 - 8
Which security architecture principle states that security
requirements should be addressed from the very beginning of
development - not as an afterthought?
The principle of Fail Secure prioritizes availability
- it disables the security control so users can still access the
system even when something goes wrong.
Scenario: A financial organization ensures that the same person who
initiates a wire transfer cannot also approve it. What security
principle does this demonstrate?
A database admin is only given access to the databases they directly
manage - not to HR systems, application servers, or other unrelated
resources. This is an example of:
An enterprise deploys a perimeter firewall, an IDS, network
segmentation, secure endpoints, AND encryption - so that if the
firewall is bypassed, other controls still protect the network. What
principle does this represent?
Zero Trust is a security model that assumes all
internal network users are trusted, but external users must be
verified before access is granted.
Which of the following BEST describes the "Default Deny" principle?
Name two ongoing maintenance tasks that are required
because "Security is a Process" - meaning security must be maintained
over time.
Architecture Flaws & Attacks
Questions 9 - 14
A technique used to transfer information in a secretive, unauthorized
manner - either by exploiting shared resources like RAM/CPU or by
accessing storage media - is called a:
Scenario: A malicious employee at a bank writes code that rounds down
each transaction by $0.001 and deposits those fractions into a hidden
account. Over millions of transactions, this accumulates into a large
theft that went undetected. What type of attack is this?
A Maintenance Hook (backdoor) is a legitimate and
safe feature because it is only accessible to authorized developers.
Which type of covert channel involves one process accessing the timing
or usage of a shared system resource (such as CPU or RAM) to leak
information to another process?
What is Data Diddling? Describe when it occurs.
Which protection mechanism ensures that a system returns to a
known-good secure state after a failure or discontinuity, preventing
the failure from compromising secure operation?
CIA Techniques & OS Concepts
Questions 15 - 18
What is process confinement, and give one real-world
technology that implements it?
In the OS ring model, Ring 0 (the Kernel) has the
least privilege, while Ring 3 (Applications) has the
most privilege.
If a compromised program is processing sensitive data, which aspect of
the CIA triad is MOST directly threatened?
What does Process Isolation guarantee in an operating
system?
Security Models
Questions 19 - 25
The Bell-LaPadula model is designed to enforce which
security property?
Scenario: A user with "Secret" clearance tries to read a "Top Secret"
document. According to Bell-LaPadula, is this allowed? Name the rule
that applies.
The Biba model's "No Read Down" rule means:
In the Access Control Matrix, the columns represent
Capability Lists tied to subjects (users).
What are the four rules of the Take-Grant model? List
them.
Which statement CORRECTLY compares Bell-LaPadula and Biba?
Scenario: A "Top Secret" cleared analyst wants to write a report
summary into an "Unclassified" document. According to Bell-LaPadula,
is this allowed? What rule applies and why?
0
/ 25
-
-
-
0
Correct
0
Wrong
0%
Score