Fundamental Security Architecture Concepts GDSA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a security reference architecture?

   • AThe SABSA framework for enterprise security architecture
   • BA list of security patches that need to be applied
   • CA network diagram showing the current IP addresses of all devices
   • DA firewall rule set that blocks all inbound traffic
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a common threat modeling technique?

   • ASTRIDE
   • BSIEM
   • COSI model
   • DCVSS
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary goal of threat modeling in security architecture?

   • ATo identify potential threats and vulnerabilities in a system design so they can be mitigated
   • BTo document all security incidents that have occurred
   • CTo test the system's performance under heavy load
   • DTo create a detailed network diagram of the system
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement best describes the purpose of a defense-in-depth strategy?

   • ATo implement the same control at every layer of the OSI model to ensure consistency
   • BTo use multiple independent layers of security controls so that a failure in one layer does not leave the asset unprotected
   • CTo rely on a single strong control at the network perimeter to block all attacks
   • DTo place all security controls at the application layer to simplify management
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is migrating a legacy application to the cloud. The application has a web front end, an application server, and a database. The security team wants to follow a proven pattern that separates the tiers and provides clear guidance on firewall rules. Which approach best uses a reference architecture?

   • ARecreate the on-premises flat network in the cloud and use the same firewall rules as the legacy environment.
   • BUse a third-party security appliance without reviewing the provider's architecture guidance.
   • CAdopt a cloud provider's reference architecture for a three-tier application, which includes separate subnets and security group rules for each tier.
   • DPlace all tiers in a single subnet and rely on the cloud provider's default security group settings.
   Reveal Solution Discussion Select an answer first