6d • 🙋♂️ CISSP
CISSP Practice Question (Domain 3: Security Architecture and Engineering)
A fintech's developers wrote their own encryption for a payments service launching in three weeks. It passed unit tests, and no cryptographic standard exists. What should the security architect do FIRST?
A. Replace the custom code with a vetted cryptographic library
B. Set a cryptographic standard and assess the design against it
C. Commission a penetration test before launch
D. Approve launch with a rewrite planned next quarter
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
4
12 comments
CISSP Practice Question (Domain 3: Security Architecture and Engineering)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+37
2
+31
3
+30
4
+30
5
+24
Powered by