Security Engineering Answer Key

Foundations and application

Strong answers name asset, attacker, boundary, invariant, control property, enforcement location, negative evidence, and residual risk. They validate complete token and protocol contracts and repair interpretation or policy—not one payload.

Systems and supply chain

Strong answers inspect effective privilege and reachability, layer blast-radius controls, preserve durable evidence, bind immutable artifacts to authenticated provenance, isolate untrusted CI code, separate release authority, verify at admission, and rehearse revocation plus clean rebuild.

Incident and architecture

Strong answers validate telemetry, distinguish evidence from inference, test competing hypotheses, scope uncertainty, coordinate preservation and containment, revoke attacker access, recover from trusted state, and turn learning into detection or fitness tests.

Oral calibration

Pass: reproduces safely, explains mechanism, verifies repair, handles counterevidence, and communicates residual risk. Repeat: relies on scanner output, memorized labels, destructive testing, unverifiable screenshots, or cannot demonstrate containment and recovery.