Attack Surface CAS-005 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which architectural design choice is most likely to increase the attack surface?

   • AExposing multiple services directly to the internet
   • BUsing strong encryption for data in transit
   • CUsing a single, well-patched web server
   • DPlacing all servers behind a firewall
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When assessing the security implications of an architectural design, what should be considered?

   • AThe number of developers on the team
   • BThe brand name of the hardware used
   • CHow the design affects the confidentiality, integrity, and availability of data
   • DThe visual appeal of the user interface
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary goal of data flow analysis in a security context?

   • ATo optimize network bandwidth usage
   • BTo reduce the number of software bugs
   • CTo determine the hardware requirements for the system
   • DTo identify where sensitive data is stored and processed
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a trust boundary in a system architecture?

   • AA point where the level of trust in data or users changes
   • BA physical firewall device
   • CA database that stores sensitive information
   • DA network segment with no security controls
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An organization is choosing between a serverless architecture and a container-based architecture for a new application. The security team must assess the security implications. Which statement is MOST accurate?

   • AContainer-based architectures have a smaller attack surface than serverless because they run on a single host.
   • BServerless architectures reduce the attack surface by abstracting the underlying infrastructure, but the application code and dependencies still need to be secured.
   • CContainer-based architectures are always more secure than serverless because they allow full control over the environment.
   • DServerless architectures eliminate the need for security controls because the provider manages everything.
   Reveal Solution Discussion Select an answer first