Chapter 3: Security Architecture and Engineering Domain 3 Practice Questions
Questions from the following topics are included in this domain:
- Research and manage secure design principles
- Understand fundamental security models
- Select and determine cryptographic solutions
- Understand cryptanalytic attacks
- Apply security principles to the facility
- Design facility security controls
To pass the CISSP exam, you have to score high in the Security Architecture and Engineering domain. Domain 3 has a 13% weighting on the exam and requires you to understand the engineering and design of servers, databases, embedded devices, and the Internet of Things (IoT), and know how to mitigate risks on such devices and systems.
Practice questions for domain 3 include understanding security models such as Biba, Bell-LaPadula, and Clark-Wilson. Also, important concepts covered on the exam include privacy by design, zero-trust, and defense in depth.
After studying these...