Asset Security & Security Architecture
57 practice questions with explanations — 15 free to try
3 of these 57 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 57 CISSP practice questions on Asset Security & Security Architecture, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Asset Security & Security Architecture: example questions & answers
3 worked examples with answers and explanations below. Try 15 CISSP questions free in the browser; the full 57-question Asset Security & Security Architecture bank is part of PassNova Premium.
In data lifecycle management, which role is ultimately accountable for classifying data and determining its protection requirements?
- AEnd user
- BData custodian
- CData owner✓
- DData processor
Answer: The data owner holds accountability for the data, including classifying it and defining protection requirements; the custodian implements those controls.
Drives that held sensitive data will be reused by another department inside the organisation. Under NIST SP 800-88, which sanitisation category protects against state-of-the-art laboratory recovery while leaving the drives usable?
- AClear
- BDestroy
- CFormat
- DPurge✓
Answer: NIST SP 800-88 (Revision 2, September 2025) keeps three sanitisation categories. Clear protects only against recovery through the device's normal interface, typically by overwriting user-addressable storage; Purge makes recovery infeasible even with state-of-the-art laboratory techniques while leaving the media reusable; Destroy also defeats laboratory recovery but leaves the media unusable. Formatting is not a sanitisation category and leaves data recoverable.
Which security model is specifically designed to enforce data integrity by preventing subjects from writing data to a higher integrity level (no write up) and reading data from a lower integrity level (no read down)?
- ABrewer-Nash
- BBell-LaPadula
- CBiba✓
- DClark-Wilson
Answer: The Biba model protects integrity using the simple integrity property (no read down) and the star integrity property (no write up).