CCISSP SECURITY ARCHITECTURE AND ENGINEERING PRACTICE
TEST | STUDY GUIDE | LATEST UPDATE 2026/2027 | ACTUAL EXAM |
PRACTICE QUESTIONS AND ANSWERS | EXAM REVIEW | 100%
CORRECT ANSWERS | VERIFIED SOLUTIONS
This comprehensive practice examination is designed for information security professionals
preparing for Domain 3 of the CISSP certification: Security Architecture and Engineering. This
domain encompasses the fundamental principles of secure system design, cryptographic systems,
physical security, and security models that form the technical foundation of information security.
Each question has been developed to reflect the cognitive complexity of the adaptive testing
environment, challenging candidates with advanced scenarios involving security model
application, cryptographic algorithm selection, secure system architecture, virtualization
security, and physical security integration. By working through these 100 advanced questions
with detailed answer rationales and verified solutions, you will systematically identify knowledge
gaps and strengthen your command of the architectural and engineering principles essential for
passing the CISSP examination.
Table of Contents
Secure Design Principles and Security Models
Cryptography and Key Management
System Architecture and Hardware Security
Virtualization and Cloud Security Architecture
Physical Security Design and Implementation
Security Capabilities of Information Systems
Vulnerabilities in Security Architectures
Cryptanalysis and Attack Countermeasures
,Question 1
A security architect is designing a multi-level secure system that must enforce both
confidentiality between different classification levels and integrity of system commands. The
system will process data at Unclassified, Secret, and Top Secret levels. Which combination of
formal security models achieves these dual objectives?
A) Biba model for confidentiality and Bell-LaPadula model for integrity
B) Bell-LaPadula model for confidentiality and Biba model for integrity
C) Clark-Wilson model for both confidentiality and integrity
D) Brewer-Nash model for both confidentiality and integrity
Correct Answer: B
The Bell-LaPadula model enforces confidentiality through its "no read up" (Simple Security
Property) and "no write down" (-Property) rules. The Biba model enforces integrity through "no
read down" and "no write up" rules. When combined, they provide both confidentiality and
integrity in a multi-level security environment. Clark-Wilson focuses on well-formed
transactions and separation of duties rather than multi-level lattice security.*
Question 2
A cryptographer is evaluating encryption modes for a high-speed database encryption system.
The system encrypts individual cells containing short values like Social Security numbers. ECB
mode is rejected because identical plaintexts produce identical ciphertexts. CBC mode is
considered but requires an initialization vector for each cell. Which mode provides the best
balance of security and storage efficiency for this use case?
A) Cipher Feedback mode with an 8-bit shift register
,B) Counter mode with a unique nonce for each cell
C) Output Feedback mode with a fixed initialization vector
D) Electronic Codebook mode with additional padding
Correct Answer: B
Counter mode (CTR) converts a block cipher into a stream cipher, generating a keystream from
a counter and nonce. Each cell can use a unique nonce without expanding the ciphertext size
beyond the plaintext length. CTR mode supports parallel encryption and decryption, making it
suitable for database environments. CFB and OFB modes have chaining dependencies that limit
parallelism.
Question 3
An organization is implementing a hardware security module to protect private keys used for
certificate signing. The security architect specifies that the HSM must support M-of-N control
for key activation. The organization has eight security administrators, and any three must present
their smart cards to activate the signing key. What security property does this configuration
primarily provide?
A) High availability of the signing service
B) Separation of duties preventing a single compromised administrator from activating the key
C) Faster transaction processing through parallel activation
D) Reduced cost by limiting the number of smart cards required
Correct Answer: B
M-of-N control splits authorization across multiple individuals. Requiring three of eight
administrators to activate a key ensures no single administrator can unilaterally use the signing
key. This mitigates the insider threat risk of a rogue administrator or a single compromised
, credential enabling malicious code signing. It provides security through distributed trust rather
than availability or performance improvements.
Question 4
A software security engineer is reviewing a password storage implementation. The developer
proposes storing passwords using SHA-256 with a unique salt per user. The engineer rejects this
and recommends Argon2id. What is the primary security advantage of Argon2id over salted
SHA-256 for password hashing?
A) Argon2id produces longer hash outputs
B) Argon2id is memory-hard, making GPU and ASIC-based brute-force attacks significantly
more expensive
C) Argon2id does not require a salt
D) Argon2id is faster than SHA-256, improving login performance
Correct Answer: B
Argon2id is specifically designed for password hashing with memory-hardness as a key feature.
The algorithm requires a configurable amount of memory (e.g., 64 MB) per hash computation.
This significantly increases the cost of parallel brute-force attacks using GPUs or ASICs, which
have many processing cores but limited memory per core. SHA-256 is fast and requires minimal
memory, making it vulnerable to high-speed cracking.
Question 5
A security architect is designing a system that must maintain perfect forward secrecy for all
communications. The system uses TLS 1.3 for transport security. Which key exchange
mechanism must be used to ensure that compromise of the server's long-term private key does
not compromise past session keys?
TEST | STUDY GUIDE | LATEST UPDATE 2026/2027 | ACTUAL EXAM |
PRACTICE QUESTIONS AND ANSWERS | EXAM REVIEW | 100%
CORRECT ANSWERS | VERIFIED SOLUTIONS
This comprehensive practice examination is designed for information security professionals
preparing for Domain 3 of the CISSP certification: Security Architecture and Engineering. This
domain encompasses the fundamental principles of secure system design, cryptographic systems,
physical security, and security models that form the technical foundation of information security.
Each question has been developed to reflect the cognitive complexity of the adaptive testing
environment, challenging candidates with advanced scenarios involving security model
application, cryptographic algorithm selection, secure system architecture, virtualization
security, and physical security integration. By working through these 100 advanced questions
with detailed answer rationales and verified solutions, you will systematically identify knowledge
gaps and strengthen your command of the architectural and engineering principles essential for
passing the CISSP examination.
Table of Contents
Secure Design Principles and Security Models
Cryptography and Key Management
System Architecture and Hardware Security
Virtualization and Cloud Security Architecture
Physical Security Design and Implementation
Security Capabilities of Information Systems
Vulnerabilities in Security Architectures
Cryptanalysis and Attack Countermeasures
,Question 1
A security architect is designing a multi-level secure system that must enforce both
confidentiality between different classification levels and integrity of system commands. The
system will process data at Unclassified, Secret, and Top Secret levels. Which combination of
formal security models achieves these dual objectives?
A) Biba model for confidentiality and Bell-LaPadula model for integrity
B) Bell-LaPadula model for confidentiality and Biba model for integrity
C) Clark-Wilson model for both confidentiality and integrity
D) Brewer-Nash model for both confidentiality and integrity
Correct Answer: B
The Bell-LaPadula model enforces confidentiality through its "no read up" (Simple Security
Property) and "no write down" (-Property) rules. The Biba model enforces integrity through "no
read down" and "no write up" rules. When combined, they provide both confidentiality and
integrity in a multi-level security environment. Clark-Wilson focuses on well-formed
transactions and separation of duties rather than multi-level lattice security.*
Question 2
A cryptographer is evaluating encryption modes for a high-speed database encryption system.
The system encrypts individual cells containing short values like Social Security numbers. ECB
mode is rejected because identical plaintexts produce identical ciphertexts. CBC mode is
considered but requires an initialization vector for each cell. Which mode provides the best
balance of security and storage efficiency for this use case?
A) Cipher Feedback mode with an 8-bit shift register
,B) Counter mode with a unique nonce for each cell
C) Output Feedback mode with a fixed initialization vector
D) Electronic Codebook mode with additional padding
Correct Answer: B
Counter mode (CTR) converts a block cipher into a stream cipher, generating a keystream from
a counter and nonce. Each cell can use a unique nonce without expanding the ciphertext size
beyond the plaintext length. CTR mode supports parallel encryption and decryption, making it
suitable for database environments. CFB and OFB modes have chaining dependencies that limit
parallelism.
Question 3
An organization is implementing a hardware security module to protect private keys used for
certificate signing. The security architect specifies that the HSM must support M-of-N control
for key activation. The organization has eight security administrators, and any three must present
their smart cards to activate the signing key. What security property does this configuration
primarily provide?
A) High availability of the signing service
B) Separation of duties preventing a single compromised administrator from activating the key
C) Faster transaction processing through parallel activation
D) Reduced cost by limiting the number of smart cards required
Correct Answer: B
M-of-N control splits authorization across multiple individuals. Requiring three of eight
administrators to activate a key ensures no single administrator can unilaterally use the signing
key. This mitigates the insider threat risk of a rogue administrator or a single compromised
, credential enabling malicious code signing. It provides security through distributed trust rather
than availability or performance improvements.
Question 4
A software security engineer is reviewing a password storage implementation. The developer
proposes storing passwords using SHA-256 with a unique salt per user. The engineer rejects this
and recommends Argon2id. What is the primary security advantage of Argon2id over salted
SHA-256 for password hashing?
A) Argon2id produces longer hash outputs
B) Argon2id is memory-hard, making GPU and ASIC-based brute-force attacks significantly
more expensive
C) Argon2id does not require a salt
D) Argon2id is faster than SHA-256, improving login performance
Correct Answer: B
Argon2id is specifically designed for password hashing with memory-hardness as a key feature.
The algorithm requires a configurable amount of memory (e.g., 64 MB) per hash computation.
This significantly increases the cost of parallel brute-force attacks using GPUs or ASICs, which
have many processing cores but limited memory per core. SHA-256 is fast and requires minimal
memory, making it vulnerable to high-speed cracking.
Question 5
A security architect is designing a system that must maintain perfect forward secrecy for all
communications. The system uses TLS 1.3 for transport security. Which key exchange
mechanism must be used to ensure that compromise of the server's long-term private key does
not compromise past session keys?
