ISSAP Practice Questions - Information Systems Security Architecture Professional (CISSP-ISSAP) Exam - ISSAP Practice Questions - Information Systems Security Architecture Professional (CISSP-ISSAP) Exam

Question 1

An architect must select an enterprise security architecture framework that explicitly derives security requirements from business attributes through layered traceability. Which framework is BEST suited for this need?

TOGAF ADM Zachman Framework SABSA NIST SP 800-53

Correct Answer:

SABSA

Question 2

Which of the following BEST describes the core tenet of NIST SP 800-207 zero trust architecture?

Encrypt all internal traffic and trust devices once authenticated Never trust, always verify; treat every access request as if it originates from an untrusted network Place strong defenses at the perimeter and use flat internal networks for performance Apply role-based access control consistently across all enterprise resources

Correct Answer:

Never trust, always verify; treat every access request as if it originates from an untrusted network

Question 3

An architect is designing a federation between an enterprise SAML identity provider and a SaaS application that supports both SAML 2.0 and OpenID Connect. Which protocol consideration is MOST relevant when choosing OIDC over SAML?

OIDC is built on OAuth 2.0 and uses JSON Web Tokens, which are better suited for native and mobile clients OIDC supports stronger encryption algorithms than SAML 2.0 OIDC mandates mutual TLS while SAML 2.0 does not OIDC eliminates the need for an identity provider

Correct Answer:

OIDC is built on OAuth 2.0 and uses JSON Web Tokens, which are better suited for native and mobile clients

Question 4

When designing a defense-in-depth architecture, which principle BEST justifies layering controls of different types and at different boundaries?

Reducing total cost of ownership for security tooling Avoiding single points of failure in security control coverage Eliminating the need for a security operations center Allowing one strong perimeter control to substitute for internal controls

Correct Answer:

Avoiding single points of failure in security control coverage

Question 5

An architect is modeling threats for a new web application using STRIDE. A vulnerability that allows an attacker to perform actions while impersonating another user maps PRIMARILY to which STRIDE category?

Tampering Repudiation Spoofing Elevation of privilege

Correct Answer:

Spoofing

Exam overview

About this Exam

Prepare with the ISSAP Practice Questions - Information Systems Security Architecture Professional (CISSP-ISSAP) Exam practice quiz. This question bank includes 100 questions covering architectural, architect, security, architecture, and data. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

ISSAP Practice Questions - Information Systems Security Architecture Professional (CISSP-ISSAP) Exam

This practice set contains 100 questions from the matching question bank and focuses on architectural, architect, security, architecture, and data. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

ISSAP Practice Questions - Information Systems Security Architecture Professional (CISSP-ISSAP) Exam

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

2W151B Munitions Systems Journeyman Volume 2 Practice Exam

Architecture Board Exam - Site Planning Practice] Practice Exam

Architecture Licensure Exam History Theory Planning Practice Test

Architecture Practice Exam Study Guide

Arizona Low Voltage Communication Systems (ACJIS) Practice Exam