WIXLIB

ISC2 CISSP-ISSAPISC2 ISSAP Certification Questions & AnswersExam Summary – Syllabus –QuestionsCISSP-ISSAPISC2 Information Systems Security Architecture Professional (CISSP-ISSAP)125 Questions Exam – 700/1000 Cut Score – Duration of 180 minutes

CISSP-ISSAP Exam QuestionsTable of Contents:Know Your CISSP-ISSAP Certification Well:.2ISC2 CISSP-ISSAP Certification Details: .2CISSP-ISSAP Syllabus: .3Architect for Governance, Compliance and Risk Management - 17% .3Security Architecture Modeling - 15% .3Infrastructure Security Architecture - 21% .4Identity and Access Management (IAM) Architecture - 16% .5Architect for Application Security - 13% .6Security Operations Architecture - 18% .7ISC2 CISSP-ISSAP Sample Questions: .8Study Guide to Crack ISC2 CISSP-ISSAP Exam: .11ISC2 ISSAP Certification Practice Exam1

CISSP-ISSAP Exam QuestionsKnow Your CISSP-ISSAP Certification Well:The CISSP-ISSAP is best suitable for candidates who want to gain knowledge inthe ISC2 Cybersecurity. Before you start your CISSP-ISSAP preparation you maystruggle to get all the crucial ISSAP materials like CISSP-ISSAP syllabus, samplequestions, study guide.But don't worry the CISSP-ISSAP PDF is here to help you prepare in a stress freemanner.The PDF is a combination of all your queries like What is in the CISSP-ISSAP syllabus? How many questions are there in the CISSP-ISSAP exam? Which Practice test would help me to pass the CISSP-ISSAP exam at thefirst attempt?Passing the CISSP-ISSAP exam makes you ISC2 Information Systems SecurityArchitecture Professional (CISSP-ISSAP). Having the ISSAP certification opensmultiple opportunities for you. You can grab a new job, get a higher salary or simplyget recognition within your current organization.ISC2 CISSP-ISSAP Certification Details:Exam NameISC2 Information Systems Security Architecture Professional(CISSP-ISSAP)Exam CodeCISSP-ISSAPExam Price 599 (USD)Duration180 minsNumber ofQuestions125Passing Score700/1000Schedule ExamPearson VUESample QuestionsISC2 CISSP-ISSAP Sample QuestionsPractice ExamISC2 CISSP-ISSAP Certification Practice ExamISC2 ISSAP Certification Practice Exam2

CISSP-ISSAP Exam QuestionsCISSP-ISSAP Syllabus:TopicDetailsArchitect for Governance, Compliance and Risk Management - 17%Determine legal, regulatory,organizational and industryrequirementsManage Risk- Determine applicable information securitystandards and guidelines- Identify third-party and contractual obligations(e.g., supply chain, outsourcing, partners)- Determine applicable sensitive/personal datastandards, guidelines and privacy regulations- Design for auditability (e.g., determine regulatory,legislative, forensic requirements, segregation, highassurance systems)- Coordinate with external entities (e.g., lawenforcement, public relations, independentassessor)- Identify and classify risks- Assess risk- Recommend risk treatment (e.g., mitigate,transfer, accept, avoid)- Risk monitoring and reportingSecurity Architecture Modeling - 15%Identify security architectureapproachVerify and validate design (e.g.,Functional Acceptance Testing(FAT), regression)ISC2 ISSAP Certification Practice Exam- Types and scope (e.g., enterprise, network,Service-Oriented Architecture (SOA), cloud,Internet of Things (IoT), Industrial Control Systems(ICS)/Supervisory Control and Data Acquisition(SCADA))- Frameworks (e.g., Sherwood Applied BusinessSecurity Architecture (SABSA), Service-OrientedModeling Framework (SOMF))- Reference architectures and blueprints- Security configuration (e.g., baselines,benchmarks, profiles)- Network configuration (e.g., physical, logical, highavailability, segmentation, zones)- Validate results of threat modeling (e.g., threatvectors, impact, probability)- Identify gaps and alternative solutions- Independent Verification and Validation (IV&V)3

CISSP-ISSAP Exam QuestionsTopicDetails(e.g., tabletop exercises, modeling and simulation,manual review of functions)Infrastructure Security Architecture - 21%Develop infrastructure securityrequirementsDesign defense-in-deptharchitecture-On-premise, cloud-based, hybridInternet of Things (IoT), zero trustManagement networksIndustrial Control Systems (ICS) securityNetwork securityOperating systems (OS) securityDatabase securityContainer securityCloud workload securityFirmware securityUser security awareness considerationsSecure shared services (e.g.,wireless, e-mail, Voice overInternet Protocol (VoIP), UnifiedCommunications (UC), DomainName System (DNS), NetworkTime Protocol (NTP))- Design boundary protection (e.g., firewalls, VirtualPrivate Network (VPN), airgaps, software definedIntegrate technical securityperimeters, wireless, cloud-native)controls- Secure device management (e.g., Bring Your OwnDevice (BYOD), mobile, server, endpoint, cloudinstance, storage)- Network visibility (e.g., sensor placement, timereconciliation, span of control, record compatibility)- Active/Passive collection solutions (e.g., spanDesign and integrate infrastructureport, port mirroring, tap, inline, flow logs)monitoring- Security analytics (e.g., Security Information andEvent Management (SIEM), log collection, machinelearning, User Behavior Analytics (UBA))- Determine cryptographic design considerationsand constraintsDesign infrastructure cryptographic - Determine cryptographic implementation (e.g., insolutionstransit, in-use, at-rest)- Plan key management lifecycle (e.g., generation,storage, distribution)ISC2 ISSAP Certification Practice Exam4

CISSP-ISSAP Exam QuestionsTopicDesign secure network andcommunication infrastructure(e.g., Virtual Private Network(VPN), Internet Protocol Security(IPsec), Transport Layer Security(TLS))Evaluate physical andenvironmental securityrequirementsDetails- Map physical security requirements toorganizational needs (e.g., perimeter protection andinternal zoning, fire suppression)- Validate physical security controlsIdentity and Access Management (IAM) Architecture - 16%- Establish and verify identity- Assign identifiers (e.g., to users, services,processes, devices)- Identity provisioning and de-provisioning- Define trust relationships (e.g., federated,standalone)Design identity management and - Define authentication methods (e.g., Multi-FactorlifecycleAuthentication (MFA), risk-based, location-based,knowledge-based, object-based, characteristicsbased)- Authentication protocols and technologies (e.g.,Security Assertion Markup Language (SAML),Remote Authentication Dial-In User Service(RADIUS), Kerberos)- Access control concepts and principles (e.g.,discretionary/mandatory, segregation/Separation ofDuties (SoD), least privilege)- Access control configurations (e.g., physical,logical, administrative)- Authorization process and workflow (e.g.,Design access control management governance, issuance, periodic review, revocation)and lifecycle- Roles, rights, and responsibilities related tosystem, application, and data access control (e.g.,groups, Digital Rights Management (DRM), trustrelationships)- Management of privileged accounts- Authorization (e.g., Single Sign-On (SSO), rulebased, role-based, attribute- based)ISC2 ISSAP Certification Practice Exam5

CISSP-ISSAP Exam QuestionsTopicDesign identity and accesssolutionsDetails- Access control protocols and technologies (e.g.,eXtensible Access Control Markup Language(XACML), Lightweight Directory Access Protocol(LDAP))- Credential management technologies (e.g.,password management, certificates, smart cards)- Centralized Identity and Access Management(IAM) architecture (e.g., cloud-based, on-premise,hybrid)- Decentralized Identity and Access Management(IAM) architecture (e.g., cloud-based, on-premise,hybrid)- Privileged Access Management (PAM)implementation (for users with elevated privileges- Accounting (e.g., logging, tracking, auditing)Architect for Application Security - 13%Integrate Software DevelopmentLife Cycle (SDLC) with applicationsecurity architecture (e.g.,Requirements Traceability Matrix(RTM), security architecturedocumentation, secure coding)Determine application securitycapability requirements andstrategy (e.g., open source, CloudService Providers (CSP), Softwareas a Service (SaaS)/Infrastructureas a Service (IaaS)/ Platform as aService (PaaS) environments)ISC2 ISSAP Certification Practice Exam- Assess code review methodology (e.g., dynamic,manual, static)- Assess the need for application protection (e.g.,Web Application Firewall (WAF), anti-malware,secure Application Programming Interface (API),secure Security Assertion Markup Language(SAML))- Determine encryption requirements (e.g., at-rest,in-transit, in-use)- Assess the need for secure communicationsbetween applications and databases or otherendpoints- Leverage secure code repository- Review security of applications (e.g., custom,Commercial Off-the-Shelf (COTS), in-house, cloud)- Determine application cryptographic solutions(e.g., cryptographic Application ProgrammingInterface (API), Pseudo Random Number Generator(PRNG), key management)- Evaluate applicability of security controls forsystem components (e.g., mobile and web clientapplications; proxy, application, and databaseservices)6

CISSP-ISSAP Exam QuestionsTopicDetailsIdentify common proactive controlsfor applications (e.g., Open WebApplication Security Project(OWASP))Security Operations Architecture - 18%Gather security operationsrequirements (e.g., legal,compliance, organizational, andbusiness requirements)Design information securitymonitoring (e.g., SecurityInformation and EventManagement (SIEM), insiderthreat, threat intelligence, userbehavior analytics, IncidentResponse (IR) procedures)Design Business Continuity (BC)and resiliency solutions- Detection and analysis- Proactive and automated security monitoring andremediation (e.g., vulnerability management,compliance audit, penetration testing)- Incorporate Business Impact Analysis (BIA)- Determine recovery and survivability strategy- Identify continuity and availability solutions (e.g.,cold, warm, hot, cloud backup)- Define processing agreement requirements (e.g.,provider, reciprocal, mutual, cloud, virtualization)- Establish Recovery Time Objectives (RTO) andRecovery Point Objectives (RPO)- Design secure contingency communication foroperations (e.g., backup communication channels,Out-of-Band (OOB))Validate Business Continuity Plan(BCP)/Disaster Recovery Plan(DRP) architectureDesign Incident Response (IR)managementISC2 ISSAP Certification Practice Exam- Preparation (e.g., communication plan, IncidentResponse Plan (IRP), training)- Identification- Containment- Eradication- Recovery- Review lessons learned7

CISSP-ISSAP Exam QuestionsISC2 CISSP-ISSAP Sample Questions:Question: 1Which of the following statements about Discretionary Access Control List (DACL) is true?a) It specifies whether an audit activity should be performed when an object attempts toaccess a resource.b) It is a unique number that identifies a user, group, and computer account.c) It is a list containing user accounts, groups, and computers that are allowed (or denied)access to the object.d) It is a rule list containing access control entries.Answer: cQuestion: 2Which of the following protocols uses public-key cryptography to authenticate the remotecomputer?a)b)c)d)SSHTelnetSCPSSLAnswer: aQuestion: 3Which of the following describes the acceptable amount of data loss measured in time?a)b)c)d)Recovery Consistency Objective (RCO)Recovery Time Objective (RTO)Recovery Point Objective (RPO)Recovery Time Actual (RTA)Answer: cISC2 ISSAP Certification Practice Exam8