3.0 Security Architecture and Engineering
Security Models & Secure Design Practice Questions
Bell-LaPadula, Biba, Clark-Wilson, the reference monitor and TCB, protection rings, and Common Criteria.
One solved question, so you can see how these are marked
A payment service must continue protecting customer data when a dependent authorization service becomes unavailable. Which design decision BEST supports that requirement?
Fail securely by denying the protected transaction when the security decision cannot be made
Fail-secure behavior denies or limits access when a security control cannot operate, preserving the security requirement. Failing open weakens protection, a perimeter alone does not protect internal paths, and emergency administrator rights violate least privilege.
Every question in the set below is marked like this. The answers stay hidden until you pick one.