(ISC)2 CISSP Certified Information Systems Security Professional Official Practice Tests, 3rd Edition

Chapter 3Security Architecture and Engineering (Domain 3)

SUBDOMAINS:

• 3.1 Research, implement and manage engineering processes using secure design principles
• 3.2 Understand the fundamental concepts of security models (e.g., Biba, Star Model, Bell-LaPadula)
• 3.3 Select controls based upon system security requirements
• 3.4 Understand security capabilities of Information Systems (IS) (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)
• 3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements
• 3.6 Select and determine cryptographic solutions
• 3.7 Understand methods of cryptanalytic attacks
• 3.8 Apply security principles to site and facility design
• 3.9 Design site and facility ...