ISC2 Exam CSSLP Topic 8 Question 73 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 73
Topic #: 8

Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy?

ACommon data security architecture (CDSA)

BApplication program interface (API)

CTrusted computing base (TCB)

DInternet Protocol Security (IPSec)

Show Suggested Answer

Suggested Answer: A, C, D

The security challenges for DRM are as follows:

Key hiding: It prevents tampering attacks that target the secret keys. In the key hiding process, secret keys are used for

authentication, encryption, and node-locking.

Device fingerprinting: It prevents fraud and provides secure authentication. Device fingerprinting includes the summary of hardware

and software characteristics in order to uniquely identify a device.

OTA provisioning: It provides end-to-end encryption or other secure ways for delivery of copyrighted software to mobile devices.

Answer B is incorrect. Access control is not a security challenge for DRM.

by Chauncey at Aug 30, 2023, 09:09 PM

Limited Time Offer

25%

23 days ago

I think the answer is C) Trusted computing base (TCB). It makes sense because it encompasses all protection mechanisms.

upvoted 0 times

...