"Presentation Layer (Layer 6)." Pg 81 Krutz The CISSP Prep Guide.

The one time pad is the most secure, and one of the simplest of all cryptographic methods. It was invented and patented just after World War I by Gilbert Vernam (of AT&T) and Joseph Mauborgne (USA, later chief of the Signal Corps). The fundamental features are that the sender and receiver each have a copy of an encryption key, which is as long as the message to be encrypted, and each key is used for only one message and then discarded. That key must be random, that is without pattern, and must remain unknown to any attacker. In addition, the key must never be reused, otherwise the cipher becomes trivially breakable. One of its features it's the key length, it's the same as the message.

2.2.1 Implement only one primary function per server to prevent functions that require different security levels from co-existing on the same server. (For example, web servers, database servers, and DNS should be implemented on separate servers.)

The security mode that is most commonly used in a commercial environment because it protects the integrity of financial and accounting data is Clark-Wilson. A security mode is a formal model or framework that defines the rules and principles for implementing and enforcing security policies and controls on a system or a network. A security mode can be based on various criteria or objectives, such as confidentiality, integrity, availability, or accountability. Clark-Wilson is a security mode that focuses on the integrity of data and transactions, and is designed to prevent unauthorized or improper modifications or tampering of data.
Clark-Wilson is based on the concept of separation of duties, which requires that different roles or functions are assigned to different parties, and that no single party can perform all the steps of a transaction or a process.
Clark-Wilson also involves the concept of well-formed transactions, which requires that all the transactions or operations on data are consistent, complete, and verifiable, and that they preserve the state and the validity of the data. Clark-Wilson can provide some benefits for security, such as enhancing the accuracy and reliability of the data and the transactions, preventing fraud or errors, and supporting the audit and compliance activities.
Clark-Wilson is most commonly used in a commercial environment because it protects the integrity of financial and accounting data, which are critical and sensitive for the business operations and performance of the organization. Clark-Wilson can help to ensure that the financial and accounting data are accurate, consistent, and valid, and that they reflect the true and fair view of the financial position and results of the organization. Clark-Wilson can also help to prevent or detect any unauthorized or improper modifications or tampering of the financial and accounting data, such as embezzlement, falsification, or manipulation, which may cause financial losses or legal liabilities for the organization. Biba, Graham-Denning, and Beil-LaPadula are not the security modes that are most commonly used in a commercial environment because they protect the integrity of financial and accounting data, although they may be related or useful security modes. Biba is a security mode that focuses on the integrity of data and transactions, and is designed to prevent unauthorized or improper modifications or tampering of data. Biba is based on the concept of no read down and no write up, which requires that a subject can only read data of lower or equal integrity level, and can only write data of higher or equal integrity level. Biba can provide some benefits for security, such as enhancing the accuracy and reliability of the data and the transactions, preventing corruption or contamination, and supporting the audit and compliance activities. However, Biba is not the security mode that is most commonly used in a commercial environment

In a federated identity management system, multiple organizations agree to trust each other to authenticate their respective users. The organization that provides the identity service acts as a trusted third party, enabling users from different organizations to access resources using the same set of credentials. The other options are not true for a third-party federated identity service.