CISSP® Certification Domain 3: Security Architecture and Engineering Video Boot Camp for 2022 - Domain 3 - What we will

Domain Three is a comprehensive area covering security architecture, cryptography, and physical security. It was consolidated from three separate domains in 2015. The section on security architecture discusses models, virtualization, and threats. Cryptography covers its history, encryption types, and attacks. Physical security emphasizes countermeasures and redundancy. Domain Three accounts for 13% of exam questions but 25% of the curriculum.

What was the impact of the 2015 exam changes on Domain Three?

• It was merged into a single domain.

• It was removed from the exam.

• It became less important.

• It was divided into more domains.

Which of the following is NOT a focus area in the security architecture and design part of Domain Three?

• Virtualization

• Network protocols

• Common security models

• Cloud computing

What is the primary difference between symmetric and asymmetric encryption?

• Symmetric requires more computational power than asymmetric.

• Asymmetric is less secure than symmetric.

• Symmetric is slower than asymmetric.

• Symmetric uses the same key for encryption and decryption, while asymmetric uses different keys.

Which of the following is a key component of physical security in data centers?

• Software firewalls

• Redundant power supplies

• Biometric authentication

• Data encryption

Why is physical security considered an integral part of defense strategies?

• It focuses solely on external threats.

• It is cheaper than other security measures.

• It ensures data availability, integrity, and confidentiality.

• It only prevents cyber attacks.