AArchitectural Assurance and Implementation Assurance.
BDesign Assurance and Implementation Assurance.
COperational Assurance and Life-Cycle Assurance.
DOperational Assurance and Architectural Assurance.
✓ Correct answer: C. Operational Assurance and Life-Cycle Assurance.When products are evaluated for the level of trust and assurance they provide, many times operational assurance and life-cycle assurance are part of the evaluation process. Operational assurance concentrates on the product’s architecture, embedded features, and functionality that enable a customer to continually obtain the necessary level of protection when using the product. Examples of operational assurances examined in the evaluation process are access control mechanisms, the separation of privileged and user program code, auditing and monitoring capabilities, covert channel analysis, and trusted recovery when the product experiences unexpected circumstances. Life-cycle assurance pertains to how the product was developed and maintained. Each stage of the product’s life cycle has standards and expectations it must fulfill before it can be deemed a highly trusted product. Examples of life-cycle assurance standards are design specifications, clipping-level configurations, unit and integration testing, configuration management, and trusted distribution. Vendors looking to achieve one of the higher security ratings for their products will have each of these issues evaluated and tested.
Keep practising. Use the free CISSP PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CISSP Exam Prep 2026 Test free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory