1
Official (ISC)² CISSP - Domain 3: Security Architecture
and Engineering Questions with Answers (100% Correct
Answers)
Algorithm Answer: A mathematical function that is used in the
encryption and decryption processes.
Asymmetric Answer: Not identical on both sides. In cryptography,
key pairs are used, one to encrypt, the other
to decrypt.
Availability Answer: Ensuring timely and reliable access to and use of
information by authorized users.
Certificate authority (CA) Answer: An entity trusted by one or more
users as an authority in a network that issues, revokes, and manages
digital certificates to bind
individuals and entities to their public keys.
© 2025 All rights reserved
, 2
CIA/AIC Triad Answer: Security model with the three security concepts
of confidentiality, integrity, and availability make up the CIA Triad. It is
also sometimes referred to as the AIC Triad.
Ciphertext Answer: The altered form of a plaintext message, so as to be
unreadable for anyone except the intended recipients. Something that
has been turned into a secret.
Confidentiality Answer: Preserving authorized restrictions on
information access and disclosure, including means for protecting
personal privacy and proprietary information.
Confusion Answer: Provided by mixing (changing) the key values used
during the repeated rounds of encryption. When the key is modified
for each round, it provides added complexity that the attacker would
encounter.
Cryptanalysis Answer: The study of techniques for attempting to defeat
cryptographic techniques and, more generally, information security
services provided through cryptography.
Cryptology Answer: The science that deals with hidden, disguised, or
encrypted communications.
© 2025 All rights reserved
Official (ISC)² CISSP - Domain 3: Security Architecture
and Engineering Questions with Answers (100% Correct
Answers)
Algorithm Answer: A mathematical function that is used in the
encryption and decryption processes.
Asymmetric Answer: Not identical on both sides. In cryptography,
key pairs are used, one to encrypt, the other
to decrypt.
Availability Answer: Ensuring timely and reliable access to and use of
information by authorized users.
Certificate authority (CA) Answer: An entity trusted by one or more
users as an authority in a network that issues, revokes, and manages
digital certificates to bind
individuals and entities to their public keys.
© 2025 All rights reserved
, 2
CIA/AIC Triad Answer: Security model with the three security concepts
of confidentiality, integrity, and availability make up the CIA Triad. It is
also sometimes referred to as the AIC Triad.
Ciphertext Answer: The altered form of a plaintext message, so as to be
unreadable for anyone except the intended recipients. Something that
has been turned into a secret.
Confidentiality Answer: Preserving authorized restrictions on
information access and disclosure, including means for protecting
personal privacy and proprietary information.
Confusion Answer: Provided by mixing (changing) the key values used
during the repeated rounds of encryption. When the key is modified
for each round, it provides added complexity that the attacker would
encounter.
Cryptanalysis Answer: The study of techniques for attempting to defeat
cryptographic techniques and, more generally, information security
services provided through cryptography.
Cryptology Answer: The science that deals with hidden, disguised, or
encrypted communications.
© 2025 All rights reserved
