Fundamental Security Architecture Concepts GDSA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which security architecture principle states that a subject should be granted only the minimum permissions necessary to perform its assigned tasks?

   • ASeparation of duties
   • BLeast privilege
   • CDefense in depth
   • DFail-safe defaults
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is designing a new file-sharing service for external partners. The architect wants to ensure that if a partner account is compromised, the attacker cannot access other partners' files. Which principle should be applied to the architecture?

   • AUse fail-safe defaults by denying all access by default and requiring partners to request access to each file.
   • BPlace all partner files in a single shared zone and rely on the application's access control list.
   • CImplement separation of duties by having different teams manage partner accounts and file storage.
   • DApply least privilege by giving each partner access only to their own files and using separate zones for partner-facing and internal systems.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is deciding whether to invest in a new intrusion detection system (IDS) for its internal network. The risk assessment shows that the likelihood of an insider threat is low, but the impact of a data breach would be very high. The security team has a limited budget and must choose between the IDS and additional firewall rules. Which decision best reflects risk management principles?

   • AImplement both the IDS and the firewall rules immediately, regardless of the budget.
   • BDo nothing because the likelihood is low, and accept the risk.
   • CPurchase the IDS because it provides visibility into insider threats, even though it does not prevent the breach.
   • DImplement the additional firewall rules first because they reduce the likelihood of a breach, and defer the IDS until the budget allows.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does risk assessment influence security architecture decisions?

   • AIt guarantees that all threats are eliminated from the system
   • BIt helps prioritize which security controls to implement based on the likelihood and impact of threats
   • CIt determines the exact number of firewalls required for every network
   • DIt replaces the need for security architecture reviews
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A startup is building its first production network. The CTO wants to follow a recognized security framework to ensure the design is robust. The security architect recommends adopting a reference architecture that includes a DMZ, an internal network, and a management network. What is the primary reason this reference architecture is beneficial?

   • AIt guarantees compliance with all regulatory requirements.
   • BIt eliminates the need for a risk assessment.
   • CIt provides a standardized blueprint that incorporates best practices and reduces design errors.
   • DIt reduces the need for security monitoring because the design is proven.
   Reveal Solution Discussion Select an answer first