Designing a secure system is like designing a modern casino vault. Amateurs focus only on the thickness of the door, but professionals design for layers of access control, active monitoring, and the inevitability of an insider threat. The CISSP exam tests whether you're the amateur or the professional, and nowhere is this more true than in Domain 3.
These free practice questions test your judgment on CISSP Domain 3: Security Architecture and Engineering. They focus on applying security models, selecting cryptographic solutions, and designing physical security, mirroring the real exam's emphasis on choosing the most appropriate control in a given scenario.
Key facts
- Domain Weighting: 13% of the total CISSP exam score.
- Key Topics: Secure design principles, fundamental security models, cryptography, and physical security controls.
- Passing Score: 700 on a 1000-point scaled score.
- Exam Format: Computerized Adaptive Testing (CAT) for the English exam, ranging from 125 to 175 questions.
- Official Blueprint: ISC2 CISSP Certification Exam Outline.
- Industry Growth: The U.S. Bureau of Labor Statistics projects information security jobs to grow 32% from 2022 to 2032, signaling massive demand for certified leaders.
Why These Practice Questions Test Judgment, Not Memory
These 10 questions are calibrated to the current CISSP blueprint and reflect the adaptive, scenario-based nature of the real test. This is not a simple knowledge dump. The CISSP exam, especially in a technical domain like this, is designed to weed out candidates who can only recite definitions.
It tests your judgment.
Studying for CISSP? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
As you work through these questions, don't just hunt for the right answer. Practice the VoraPrep method: ask yourself why each of the wrong options is a tempting but ultimately incorrect choice for this specific scenario. That is the key to thinking like the examiner. If you find these questions challenging, it's a good sign you are identifying the exact gaps the real exam will exploit. Try VoraPrep's adaptive CISSP practice questions to target these gaps automatically.
Security Architecture and Engineering Practice Questions
Read each question carefully and select the best possible answer. The detailed explanations follow the full set.
Question 1
A financial services company is developing a new online trading platform. The primary security objective is to prevent unauthorized modification of transaction data by users. Which security model should the system architect prioritize in the design?
Question 2
An organization needs to encrypt a large 500 GB database backup file before transmitting it to a secure offsite storage facility. Speed is a critical factor. Which type of cryptographic algorithm is most suitable for this task?
Question 3
A security engineer is designing the physical security for a new data center. They recommend that the exterior lighting should illuminate the area to a minimum of 8 feet high and provide at least 2 foot-candles of power. This recommendation is an example of which security concept?
Question 4
During a system design review, you are asked to explain the primary purpose of the "no read-up" rule in the Bell-LaPadula model. What is the correct explanation?
Question 5
A software development team is building a secure application that handles sensitive medical records. The lead architect mandates that in the event of a security control failure, the system must default to a state that blocks all access to the records. This design principle is known as:
Question 6
An organization wants to implement a solution that provides integrity and non-repudiation for legally binding digital contracts. Which cryptographic tool is specifically designed to provide these two assurances?
Question 7
A system is designed to use a Trusted Platform Module (TPM) to store cryptographic keys. What is the primary security advantage of using a TPM for this purpose?
Question 8
In the context of virtualization security, what is the term for an attack that allows an attacker to break out of a guest operating system and interact with the host operating system?
Question 9
A security architect is reviewing the design of a system that processes two types of data: "Unclassified" and "Secret". The system must enforce a mandatory access control policy. A user with "Unclassified" clearance attempts to write a file to a "Secret" directory. Which security model property would permit this action while preventing information leakage?
Question 10
Which of the following is an example of a covert channel?
Answer Key and Explanations
Question 1: Biba Model for Integrity
Correct Answer is B Explanation: The key phrase is "prevent unauthorized modification," which is the definition of integrity. The Biba model was created specifically to address integrity. Its two primary rules are:- The Simple Integrity Property ("no read down"): A subject cannot read an object at a lower integrity level.
- The * (Star) Integrity Property ("no write up"): A subject cannot write to an object at a higher integrity level.
| Security Model | Primary Goal | Key Rule Mantra | Common Use Case |
|---|---|---|---|
| Bell-LaPadula | Confidentiality | "No Read Up, No Write Down" | Military/Government data classification (e.g., Top Secret, Secret) |
| Biba | Integrity | "No Read Down, No Write Up" | Preventing unauthorized modification of critical data or systems |
| Clark-Wilson | Integrity | "Well-formed transactions" via access triples | Commercial applications like banking, requiring high data integrity |
| Brewer-Nash | Conflict of Interest | "Chinese Wall" model | Consulting or legal firms where users cannot access data of competing clients |
Question 2: Symmetric Encryption for Bulk Data
Correct Answer is B Explanation: Symmetric algorithms like AES use a single shared key and are computationally much faster than asymmetric algorithms. This speed makes them the only suitable choice for encrypting large volumes of data, known as bulk encryption. Choosing the right cryptographic tool is a core competency tested on the exam.Asymmetric encryption (A) is extremely slow and is used for small amounts of data, such as encrypting the symmetric key for secure exchange (a hybrid approach). Hashing (C) provides integrity but not confidentiality. A Digital Signature (D) provides integrity and non-repudiation. Remember, even the best algorithm is useless without proper key management, a critical topic covering the entire key lifecycle.
Question 3: CPTED for Physical Security
Correct Answer is B Explanation: Crime Prevention Through Environmental Design (CPTED) is a discipline that uses architectural and environmental design to deter criminal behavior. The specific lighting requirements are a classic example of applying CPTED's principle of natural surveillance.This is part of a larger Defense in Depth (A) strategy, which layers administrative, technical, and physical controls. CPTED is a specific physical control concept. An Access Control Vestibule (C) is a mantrap, another physical control. Least Privilege (D) is a logical access control principle. The exam expects you to identify the most precise concept being described.
Question 4: Bell-LaPadula's Simple Security Property
Correct Answer is A Explanation: The Bell-LaPadula model is the foundational model for confidentiality. Its two primary rules have formal names you must know:- The Simple Security Property ("no read-up"): A subject at a given security level cannot read data from a higher security level. This is the correct answer.
- The * (Star) Security Property ("no write-down"): A subject at a given security level cannot write data to a lower security level. This prevents a user with "Top Secret" clearance from accidentally saving a file into an "Unclassified" folder.
Option (B) correctly describes the "no write-down" rule, making it a tempting distractor if you confuse the two properties.
Question 5: Fail-Secure Design
Correct Answer is B Explanation: A fail-secure (or fail-closed) state is a design principle where a system defaults to a secure posture upon failure, typically by blocking access. This prioritizes security and confidentiality over availability. For sensitive medical records, this is the only acceptable choice. A fail-open (A) state would grant access upon failure, which is a catastrophic security breach. Fail-soft (C) implies a degraded but partially functional state.Question 6: Digital Signatures for Integrity and Non-Repudiation
Correct Answer is C Explanation: A digital signature is the only cryptographic tool listed that provides both integrity (proof the data wasn't changed) and non-repudiation (proof of who created it). It achieves this by hashing the data and then encrypting that hash with the sender's private key.- Hashing: Alice hashes the digital contract with SHA-256, creating a unique hash value.
- Encrypting the Hash: Alice encrypts this hash value using her private key. This encrypted hash is the digital signature.
- Sending: She attaches the signature to the original contract and sends both to Bob.
- Verification: Bob receives the contract and signature. He independently calculates the hash of the contract text he received.
- Decrypting the Signature: Bob uses Alice's public key (which is widely available) to decrypt her signature. This reveals the original hash she calculated.
- Comparing Hashes: If Bob's calculated hash matches the decrypted hash, he has cryptographic proof of both integrity and non-repudiation.
A Message Authentication Code (MAC) (A) provides integrity and authenticity but not non-repudiation, because it relies on a shared secret key.
Question 7: TPM for Hardware-Bound Keys
Correct Answer is C Explanation: A Trusted Platform Module (TPM) is a hardware cryptoprocessor designed to provide a hardware root of trust. Its primary security function is to create and store cryptographic keys in a way that binds them to that specific hardware. This process, often called "sealing," prevents the keys from being extracted or used on any other system, even if an attacker steals the hard drive. It is not necessarily the fastest (A) and is explicitly designed to prevent easy sharing (B).Question 8: VM Escape from Guest to Host
Correct Answer is B Explanation: A VM Escape is the precise term for an attack where a vulnerability is exploited to break out of a guest virtual machine and gain access to the underlying hypervisor (host). This is a critical failure of the virtualized environment.Question 9: Bell-LaPadula's * (Star) Property
Correct Answer is C Explanation: This question tests a deep understanding of Bell-LaPadula. The goal is to prevent information leakage (confidentiality). The action is a user with "Unclassified" clearance writing to a "Secret" directory, which is a "write-up."The \ (Star) Security Property of Bell-LaPadula ("no write-down") prevents a high-level subject from writing to a low-level object. The rule does not prohibit writing up. Therefore, this action is permitted* because it is not explicitly forbidden by the model's rules aimed at preventing leaks from higher to lower levels. The Simple Security Property (A) governs reading. The Biba properties (B, D) govern integrity, which is not the primary concern here.
Question 10: Covert Channels
Correct Answer is C Explanation: A covert channel is an information transfer method that violates security policy by using system resources or communication channels in an unintended way. Modulating CPU usage (a timing channel) or hiding data in unused packet headers (a storage channel) are classic examples. The goal is to be subtle and evade security monitoring. The other options describe overt (though unauthorized or misconfigured) channels, not covert ones.Calculate Your CISSP Score & Study Hours by Domain
Adjust your practice scores across official CISSP blueprint domains to predict your pass probability and generate a domain-weighted study schedule.
What Your Score Reveals About Your Domain 3 Readiness
Count your correct answers. This isn't about a grade; it's a diagnostic tool.
- 8-10 Correct: You have a strong command of the core judgment required for this domain. You can differentiate between security models and cryptographic tools in context. Your next step is using an adaptive question bank, like VoraPrep's, to hunt down and eliminate any remaining niche weak spots.
- 5-7 Correct: You have a solid foundation but are getting caught by the exam's tempting distractors. This is common. You likely confused the formal properties of Bell-LaPadula or the specific assurances of a digital signature versus a MAC. The key is targeted review. Focus on the why behind each concept, not just the what.
- 0-4 Correct: You have foundational gaps in this domain, and that's okay. This score is a valuable signal to allocate more study time here before moving on. Start with the core principles: the CIA triad, secure design principles, and the fundamental differences between the main security models. Our comprehensive lessons in the VoraPrep CISSP course are designed to build this foundation from the ground up.
Regardless of your score, the goal is not memorizing these questions. It's about internalizing the reasoning that leads to the best answer. For more on this mindset, see our guide on How Hard is the CISSP Exam?.
How to Master Domain 3 with a Complete Course
A 10-question quiz is a great start, but passing the 125-175 question adaptive CISSP exam requires consistent, targeted practice.
VoraPrep is a complete 6-pillar interactive course built to get you exam-ready. It is not just a question bank.
- Textbook-Grade Lessons: Step-by-step interactive guides covering every objective in the ISC2 blueprint.
- Adaptive Practice Bank: Over 2,200 exam-calibrated questions that automatically focus on your weak areas.
- 1:1 Exam Simulators: Full-length, timed mock exams that replicate the Pearson VUE testing experience.
- Spaced-Repetition Flashcards: Drill key terms and concepts using a system scientifically proven to improve memory.
- Personalized Study Plan: We build a dynamic day-by-day calendar around your exam date to keep you on track.
- Vory, your 24/7 Personal Tutor: Stuck on a concept? Ask Vory inside any lesson or question for an instant step-by-step explanation.
Legacy courses charge thousands for passive videos. VoraPrep provides a complete, interactive learning system for a simple subscription. See how we compare in our guide to the Best CISSP Review Courses.