Fundamental Security Architecture Concepts GDSA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A small company is building its first cloud environment and wants to follow a proven pattern for separating the web, application, and database tiers. The team is unfamiliar with cloud security design. Which approach best leverages a reference architecture?

   • AUse a well-architected framework from the cloud provider that includes a three-tier network design with subnets for each tier and security groups that restrict traffic between them.
   • BDesign a custom network from scratch, placing all resources in a single subnet and relying on the cloud provider's default security settings.
   • CAsk the cloud provider to manage all security controls and place all tiers in the same virtual network.
   • DCopy the network design from a colleague's previous project without reviewing the security controls.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security architect is threat modeling a new online payment system. The system accepts credit card numbers and transmits them to a payment processor. The architect is using STRIDE to categorize threats. Which threat category would most directly apply to an attacker intercepting the credit card numbers during transmission?

   • ATampering
   • BInformation disclosure
   • CSpoofing
   • DDenial of service
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security architect is designing access controls for a new financial application. The compliance team requires that no single individual can both initiate and approve a payment transfer. The architect also wants to minimize the risk of a compromised administrator account. Which combination of principles best addresses these requirements?

   • AImplement separation of duties by assigning initiation and approval roles to different users, and apply least privilege by granting administrators only the permissions needed for their tasks.
   • BImplement fail-safe defaults by denying all access by default, and require two-factor authentication for all users.
   • CUse a single administrator account for all payment functions and rotate the password daily.
   • DGrant all users the same role to simplify management, and rely on audit logs to detect fraudulent transfers after the fact.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In a secure architecture, the principle of fail-safe defaults means that:

   • AAll users are granted access by default and then restrictions are applied
   • BAccess is denied by default and granted only when explicitly permitted
   • CThe system automatically grants temporary access during a failure
   • DAccess is based on the user's role and seniority
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A threat modeling exercise for a new mobile banking app identifies that an attacker could intercept the API traffic between the mobile app and the backend server. The team decides to implement certificate pinning and enforce that the backend server only accepts TLS connections. Which threat modeling step does this decision represent?

   • ADecomposing the application into data flows and entry points.
   • BMitigating the identified threat by adding controls that reduce the likelihood of interception and unauthorized access.
   • CDocumenting the threat in a risk register and assigning a risk owner.
   • DIdentifying the trust boundary between the mobile app and the backend server.
   Reveal Solution Discussion Select an answer first