Free Systems Software Integrator (SSI) Exam Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Systems Software Integrator (SSI) Exam practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An integrator is defining protection for design documents that are stored, transmitted, and converted into deployment instructions. Which scope matches NIST's information-management guidance?

   1. A. Protect stored originals; apply transfer controls only to classified records.
   2. B. Protect information at rest, in transit, and during transformation.
   3. C. Protect transmitted copies; treat retained originals as a configuration concern.
   4. D. Protect converted outputs; rely on source ownership for earlier states.

   Answer: B

   Explanation: "The security aspects apply to information while at rest (i.e., persistent or non-persistent storage), while in transit between a source/point of origin and destination, and while in transformation." The document workflow crosses all three states. Limiting protection to one state leaves part of that workflow outside the required analysis.

   Reference: Engineering Trustworthy Secure Systems — Appendix I.6.3, IM-1.4, Note 1, p. 160

2. 2A test plan must verify the wording and color of a warning label on an installed controller. Which verification method directly fits that requirement?

   1. A. Inspection
   2. B. Analysis
   3. C. Demonstration
   4. D. Load testing

   Answer: A

   Explanation: "Inspection: The visual examination of a realized end product. Inspection is generally used to verify physical design features or specific manufacturer identification." Visual examination can establish the label's physical attributes. Mathematical prediction, operating demonstrations, and load measurements do not directly verify the stated label features.

   Reference: NASA Systems Engineering Handbook — Section 5.3.1.2.1, Methods of Verification, p. 93

3. 3An integration engineer is deciding where to check secure interface activation while adding components incrementally. Which NIST integration-preparation task addresses this?

   1. A. Plan secure activation and integrity checkpoints as the elements are synthesized.
   2. B. Check security only after the complete system has been combined in a single step.
   3. C. Check isolated elements only, leaving their combined interface activation unexamined.
   4. D. Defer interface activation checks until after operational handover is complete.

   Answer: A

   Explanation: "IN-1.1 Identify and define checkpoints for the correct secure activation and integrity of the interfaces and the selected system functions as the system elements are synthesized." IN-1.1 defines checkpoints during synthesis of elements. End-only testing, isolated-component testing alone, or post-handover checks do not provide the specified incremental integration checkpoints.

   Reference: Engineering Trustworthy Secure Systems — Appendix H.8.3, IN-1.1, p. 132

4. 4Which approach matches CSF ID.RA-05 when assessing inherent cybersecurity risk for an integrated system?

   1. A. Consider threats, vulnerabilities, likelihoods, and impacts together.
   2. B. Rank systems by vulnerability counts while assuming equal likelihood and impact.
   3. C. Use potential consequence alone without considering the likelihood of exploitation.
   4. D. Use implemented control counts as a substitute for threat and vulnerability analysis.

   Answer: A

   Explanation: "ID.RA-05: Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization" ID.RA-05 combines threat, vulnerability, likelihood, and impact information. Counts alone, consequence without likelihood, or the number of implemented controls do not supply that inherent-risk basis.

   Reference: The NIST Cybersecurity Framework (CSF) 2.0 — Appendix A, ID.RA-05, p. 19

5. 5How should personnel obligations be addressed when preparing to manage supplier drawings subject to access restrictions?

   1. A. Inform staff of the security duties associated with the drawings' restrictions.
   2. B. Assume the supplier's ownership notice alone communicates every staff duty.
   3. C. Inform only document authors, leaving recipients outside the duty briefing.
   4. D. Treat project access approval as permission to disregard supplier restrictions.

   Answer: A

   Explanation: "Where restrictions or constraints apply, information is identified accordingly. Staff with knowledge of such items of information are informed of their security-relevant obligations and responsibilities." IM-1.3 requires identifying restrictions and informing staff with knowledge of the information about their obligations. Ownership notices alone do not communicate all duties, recipients are not excluded, and project access approval does not cancel restrictions.

   Reference: Engineering Trustworthy Secure Systems — Appendix I.6.3, IM-1.3 Note, p. 160

6. 6An integration verification plan will use mathematical models and simulation to predict performance before an assembled prototype exists. Which method is this?

   1. A. Inspection
   2. B. Demonstration
   3. C. Analysis
   4. D. Acceptance sampling

   Answer: C

   Explanation: "Analysis includes the use of modeling and simulation as analytical tools." The method predicts behavior using models. Inspection examines a realized item, demonstration shows capability through use, and acceptance sampling selects items for an acceptance decision.

   Reference: NASA Systems Engineering Handbook — Section 5.3.1.2.1, Methods of Verification, p. 93

7. 7Before connecting two delivered system elements, an integrator finds that one interface does not conform to its security definition. What response follows NIST's integration tasks?

   1. A. Accept the interface because both elements passed their separate factory tests.
   2. B. Record the supplier's release names and continue without addressing the mismatch.
   3. C. Address the security-relevant conformance issue during integration.
   4. D. Replace the interface definition with the observed behavior without review.

   Answer: C

   Explanation: "IN-2.2 Perform actions to address any security-relevant conformance or availability issues." The preceding task checks availability and conformance against interface definitions and schedules. Independent component tests and labels do not resolve a mismatched interface; unilateral redefinition bypasses that check.

   Reference: Engineering Trustworthy Secure Systems — Appendix H.8.3, IN-2.1–IN-2.2, p. 132

8. 8A security risk has been measured and found to exceed the project's defined risk threshold. What does NIST's risk-analysis task call for at this point?

   1. A. Remove the risk from the profile because the threshold was exceeded.
   2. B. Treat measurement itself as evidence that the risk is acceptable.
   3. C. Wait until the risk occurs before choosing possible responses.
   4. D. Define and record recommended treatment strategies and measures.

   Answer: D

   Explanation: "RM-3.4 Define and record recommended treatment strategies and measures for each securityrelevant risk that exceeds its risk threshold." Exceeding the threshold triggers recommendations for treatment and measurement. It does not justify deleting, automatically accepting, or waiting for realization of the risk.

   Reference: Engineering Trustworthy Secure Systems — Appendix I.4.3, RM-3.4, p. 156

9. 9An integrator is choosing how to archive approved system records under NIST SP 800-160. Which basis should govern the archive media, location, and protection?

   1. A. Choose storage that meets retrieval speed targets, treating retention as optional.
   2. B. Choose the longest retention available, regardless of agreed access restrictions.
   3. C. Use the organizational retention policy without checking applicable agreements.
   4. D. Select media, location, and protection to meet retention, rights, and security constraints.

   Answer: D

   Explanation: "The media, location, and protection of the information are selected in accordance with the specified storage and retrieval periods, agreements, legislation, and organizational security policy." The archive must conform to specified storage/retrieval periods, agreements, legislation, and security policy. Speed alone, indiscriminate retention, and ignoring agreements each omit a governing constraint.

   Reference: Engineering Trustworthy Secure Systems — Appendix I.6.3, IM-2.4 Note, p. 161

10. 10A plan calls for an operator to show that the maintenance screen can be opened, without detailed performance-data collection. Which verification method matches that approach?

    1. A. Analytical prediction
    2. B. Visual inspection
    3. C. Statistical sampling
    4. D. Demonstration

    Answer: D

    Explanation: "It is generally a basic confirmation of performance capability, differentiated from testing by the lack of detailed data gathering." Showing the capability through operation without detailed data gathering is demonstration. Analysis predicts; inspection examines; sampling is a selection approach rather than this operational method.

    Reference: NASA Systems Engineering Handbook — Section 5.3.1.2.1, Methods of Verification — Demonstration, p. 93