Sample question 1 — Security Architecture and Engineering
IAM owns a privileged review. Ops needs BEST containment call while documenting the decision. Situation detail: minimize and harden the TCB so policy enforcement components are small and verifiable. BEST alignment to CISSP judgment?
- A. Trusted computing base.
- B. Secure memory and process isolation.
- C. Security architecture review gates.
- D. Cryptographic algorithm selection.
Answer: A. Option A is correct. trusted computing base fits because the required BEST professional action is: Minimize and harden the TCB so policy enforcement components are small and verifiable. That concrete practice is what CISSP expects in this situation. Option B is incorrect because secure memory and process isolation solves a different need (Enable process isolation and memory protections as baseline OS hardening for multi-user systems) and would miss the situation described here. Option C is incorrect because picking security architecture review gates ignores that this situation calls for trusted computing base's BEST professional action. Option D is incorrect because cryptographic algorithm selection is scoped to another BEST professional action, not the need stated in this stem.