Question 1

Confidentially is provided if the data cannot be read.

Accepted Answer

Confidentially is provided if the data cannot be read either through access controls or encryption.

Question 2

Integrity is provided if the data cannot be read.

Accepted Answer

Integrity is provided if you can be ensured that the data has not changed in any way.

Question 3

Availability describes what percentage of the time the resource or the date is available.

Accepted Answer

Availability refers to the proportion of time a system or resource is operational and accessible when required for use, typically expressed as a percentage of total time.

Question 4

A Stakeholder is an individual with interests or concerns that should be considered.

Accepted Answer

A stakeholder is indeed any individual or group who has an interest in or is affected by a project, decision, or outcome, and their concerns should be considered in the project's planning and execution phases.

Question 5

An embedded system is a standalone piece of software.

Accepted Answer

An embedded system is a piece of software built into a larger piece of software.

Question 6

Boundary Control Services are responsible for placing various components in security zones.

Accepted Answer

Boundary Control Services are indeed responsible for placing various components in security zones as part of their function to manage and enforce security policies at the boundaries of these zones, ensuring that only authorized access is allowed and that the integrity of the zones is maintained.

Question 7

When a CPU gets an instruction from memory, the process is called fetching.

Accepted Answer

Fetching is the process where the CPU retrieves an instruction from memory to be executed.

Question 8

Flash memory is a type RAM.

Accepted Answer

Flash memory is a type of non-volatile storage that can be electronically erased and reprogrammed, unlike RAM, which is volatile and loses its data when power is removed.

Question 9

Implied addressing addresses the entire primary memory space.

Accepted Answer

Implied addressing refers to registers usually contained inside the CPU.

Question 10

In asymmetric multiprocessing mode, a processor is dedicated to a specific process or application.

Accepted Answer

In asymmetric multiprocessing (AMP), processors are assigned specific tasks or applications, with one main processor controlling the system and the others handling assigned tasks, leading to a dedicated processing approach for specific processes or applications.

Question 11

Which if the following is a system component that enforces access controls on an object?
A) Security Perimeter
B) Reference Monitor
C) Security Kernel
D) TCB

Accepted Answer

The Reference Monitor is a system component that enforces access controls on an object by mediating all access requests.

Question 12

Which framework is a two-dimensional model that intersects communication interrogatives (what, why, where, and so on) with various viewpoints (planner owner, designer, and such)?
A) Zachmann
B) TOGAF
C) ITIL
D) ISO/IEC 27000 Series

Accepted Answer

Zachmann Framework

Question 13

Which of the following occurs when someone has access to information at one level that allows them to infer information about another level?
A) Polymorphism
B) Inference
C) Contamination
D) Escalation

Accepted Answer

Inference occurs when someone can deduce or infer information not explicitly available to them based on the information they do have. This can happen across different levels of data access, where knowledge at one level allows insights into another.

Question 14

Which Bell-LaPadula rule says a subject cannot read data located at a higher security level than that possessed by the subject?
A) Simple security rule
B) *- property rule
C) Strong star property rule
D) Weak star property rule

Accepted Answer

The Simple Security Rule, also known as the "no read up" (NRU) rule, is a part of the Bell-LaPadula model that prevents a subject from accessing information at a higher security level than the subject's clearance, ensuring confidentiality by preventing unauthorized access to sensitive information.

Question 15

Which security mode allows two or more classification levels of information to be processed at the same time?
A) Dedicated
B) System High
C) Compartmented
D) Multilevel

Accepted Answer

Multilevel security mode is designed to allow information at multiple classification levels to be processed simultaneously, accommodating users with different clearance levels.

Question 16

Which book in the Rainbow series addresses network security?
A) Red Book
B) Orange Book
C) Beige Book
D) Green Book

Accepted Answer

The Red Book, formally known as "NCSC-TG-005," is part of the Rainbow Series of books, which are a collection of documents produced by the United States government to guide information security practices. The Red Book specifically addresses network security, focusing on the secure connection of systems and the protection of data in transit.

Question 17

C1 is an evaluation level in which rating system?
A) TSEC
B) ITSEC
C) Common Criteria
D) Red Book

Accepted Answer

The answer of C1 is an evaluation level in which...

Question 18

Which rating system uses a concept called a protection profile?
A) TSEC
B) ITSEC
C) Common Criteria
D) Red Book

Accepted Answer

The Common Criteria for Information Technology Security Evaluation (CC) uses the concept of a protection profile, which is a document that stipulates the standard security requirements for a specific category of products or systems.

Question 19

Which type accreditation evaluates an application or support system?
A) Type accreditation
B) System accreditation
C) Site accreditation
D) Simple accreditation

Accepted Answer

System accreditation evaluates an application or support system, focusing on the security and operational aspects of a specific system within an organization.

Question 20

Which of the following is sometimes called a backdoor?
A) Maintenance hook
B) Padded cell
C) SAML
D) Reference monitor

Accepted Answer

A maintenance hook, also known as a backdoor, is a method used by developers to bypass security mechanisms to access a system directly for troubleshooting or maintenance purposes.

Quiz 7: Security Architecture and Design

Confidentially is provided if the data cannot be read.

Integrity is provided if the data cannot be read.

Availability describes what percentage of the time the resource or the date is available.

A Stakeholder is an individual with interests or concerns that should be considered.

An embedded system is a standalone piece of software.

Boundary Control Services are responsible for placing various components in security zones.

When a CPU gets an instruction from memory, the process is called fetching.

Flash memory is a type RAM.

Implied addressing addresses the entire primary memory space.

In asymmetric multiprocessing mode, a processor is dedicated to a specific process or application.

Which if the following is a system component that enforces access controls on an object?

Which framework is a two-dimensional model that intersects communication interrogatives (what, why, where, and so on) with various viewpoints (planner owner, designer, and such) ?

Which of the following occurs when someone has access to information at one level that allows them to infer information about another level?

Which Bell-LaPadula rule says a subject cannot read data located at a higher security level than that possessed by the subject?

Which security mode allows two or more classification levels of information to be processed at the same time?

Which book in the Rainbow series addresses network security?

C1 is an evaluation level in which rating system?

Which rating system uses a concept called a protection profile?

Which type accreditation evaluates an application or support system?

Which of the following is sometimes called a backdoor?