nerdexam
(ISC)2

CSSLP · Question #69

Which of the following areas of information system, as separated by Information Assurance Framework, is a collection of local computing devices, regardless of physical location, that are interconnecte

The correct answer is D. Enclave Boundaries. An enclave, as defined by Information Assurance Frameworks, is a collection of local computing devices connected via LANs and governed by a single security policy, regardless of their physical location.

Secure Software Architecture and Design

Question

Which of the following areas of information system, as separated by Information Assurance Framework, is a collection of local computing devices, regardless of physical location, that are interconnected via local area networks (LANs) and governed by a single security policy?

Options

  • ALocal Computing Environments
  • BNetworks and Infrastructures
  • CSupporting Infrastructures
  • DEnclave Boundaries

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    91% (43)

Why each option

An enclave, as defined by Information Assurance Frameworks, is a collection of local computing devices connected via LANs and governed by a single security policy, regardless of their physical location.

ALocal Computing Environments

"Local Computing Environments" is too broad and generic; an enclave is a more specific and formal term used in security frameworks.

BNetworks and Infrastructures

"Networks and Infrastructures" refers to the underlying communication systems and hardware, but not specifically a collection of devices governed by a single security policy in the way an enclave is.

CSupporting Infrastructures

"Supporting Infrastructures" could include various services like power, cooling, or physical security, which are broader than just networked computing devices under a single security policy.

DEnclave BoundariesCorrect

An enclave, in the context of information assurance, is defined as a collection of computing devices (like servers, workstations, and peripherals) that are interconnected, usually via local area networks, and operate under a unified security policy. This setup allows for consistent security management and policy enforcement within a defined boundary, regardless of the physical distribution of the devices.

Concept tested: Information Assurance Framework - Enclaves

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v1.pdf

Topics

#Information Assurance Frameworks#Security Enclaves#System Boundaries#Security Architecture

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice