Attack Surface CAS-005 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a data flow diagram, what does an arrow typically represent?

   • AA user action
   • BA security control
   • CThe physical network cable
   • DThe direction of data movement
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of performing a risk assessment on system architecture?

   • ATo prioritize security efforts based on identified risks
   • BTo replace the need for security controls
   • CTo guarantee the system is completely secure
   • DTo increase the attack surface
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which improvement can reduce security risks related to data flow?

   • ASending data over public networks without protection
   • BEncrypting data in transit
   • CStoring data in plaintext
   • DIncreasing the number of data copies
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security architect is reviewing the architecture of a new application that uses a message queue for communication between services. The architect notices that the message queue is accessible from the internet. Which recommendation is MOST appropriate?

   • AEncrypt the messages in the queue.
   • BRestrict access to the message queue to only the services that need it.
   • CLog all access to the message queue.
   • DUse a more secure message queue protocol.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which activity is a typical part of an architecture review?

   • AInstalling security patches on servers
   • BWriting user documentation for the system
   • CRunning a penetration test against the production system
   • DReviewing the system design against security best practices
   Reveal Solution Discussion Select an answer first