nerdexam
(ISC)2

CSSLP · Question #15

Which of the following types of redundancy prevents attacks in which an attacker can get physical control of a machine, insert unauthorized software, and alter data?

The correct answer is C. Process redundancy. Process redundancy, through isolated or distributed processing, is designed to prevent attacks involving physical machine control, unauthorized software insertion, and data alteration by ensuring continuity and integrity even if one component is compromised.

Secure Software Architecture and Design

Question

Which of the following types of redundancy prevents attacks in which an attacker can get physical control of a machine, insert unauthorized software, and alter data?

Options

  • AData redundancy
  • BHardware redundancy
  • CProcess redundancy
  • DApplication redundancy

How the community answered

(24 responses)
  • A
    4% (1)
  • C
    88% (21)
  • D
    8% (2)

Why each option

Process redundancy, through isolated or distributed processing, is designed to prevent attacks involving physical machine control, unauthorized software insertion, and data alteration by ensuring continuity and integrity even if one component is compromised.

AData redundancy

Data redundancy primarily focuses on having multiple copies of data to ensure availability and integrity against data loss, not directly against physical machine compromise and unauthorized software insertion.

BHardware redundancy

Hardware redundancy involves duplicating physical components to ensure availability if one fails, but it doesn't inherently prevent an attacker with physical access from inserting unauthorized software or altering data on the compromised hardware.

CProcess redundancyCorrect

Process redundancy involves having multiple, often isolated, instances of a process or system running, or distributing the processing across different, independent systems. If an attacker gains physical control of one machine, inserts unauthorized software, or alters data on it, the redundant processes or separate systems can continue operations securely or detect inconsistencies, effectively preventing the attack from compromising the entire system or service.

DApplication redundancy

Application redundancy ensures an application remains available by running multiple instances, but if an attacker can compromise the underlying operating system or gain physical control, this does not prevent them from inserting unauthorized software or altering data.

Concept tested: Redundancy types for security

Source: https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/final

Topics

#Process Redundancy#Integrity Protection#Physical Tampering#Defensive Design

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice