Define Secure Operational Architecture (e.g., Deployment Topology, Operational Interfaces, Continuous Integration and Continuous Delivery (CI/CD)) CSSLP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security consideration is most directly associated with a multi-tier deployment topology compared to a single-tier topology?

   • ANetwork segmentation between tiers is required to enforce least privilege and limit lateral movement.
   • BAll components share the same trust boundary, simplifying access control.
   • COnly the data tier needs authentication because it stores sensitive information.
   • DThe entire application must be hardened as a single unit with no internal firewalls.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company's security team needs to detect a potential data breach in a microservices environment. They have access to logs from each service, but the logs are in different formats and stored separately. What should the security architect implement to improve threat detection?

   • ASend all logs to a third-party analytics service, but do not set up any alerts or rules.
   • BImplement a centralized log aggregation system that normalizes logs into a common format and correlates events across services.
   • CUse a monitoring tool that only tracks CPU and memory usage, and alert on high utilization.
   • DIncrease the verbosity of logs on each service, but keep them stored locally to avoid the cost of a central system.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A DevOps team is deploying a containerized application to a Kubernetes cluster. The security architect wants to ensure that the containers are configured securely and that changes are tracked. Which practice should be implemented?

   • AUse a container image scanner in the CI pipeline, and enforce a policy that only images with no critical vulnerabilities can be deployed.
   • BAllow developers to build and deploy images directly to the cluster without scanning, but require them to manually review the code.
   • CDisable the container image scanner to speed up the pipeline, and rely on runtime monitoring to detect attacks.
   • DUse the latest base image for all containers, but do not pin the version to ensure you always get the latest patches.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which practice is a key method for integrating security into a CI/CD pipeline?

   • APerforming manual security reviews only after the application is deployed to production
   • BDisabling security tests to speed up the pipeline
   • CStoring secrets in the source code repository for easy access during builds
   • DRunning automated security scans (e.g., SAST, DAST) as part of the build and test stages
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of forensic readiness in an operational architecture?

   • ATo eliminate the need for backups
   • BTo prevent all security incidents from occurring
   • CTo speed up the deployment of new features
   • DTo ensure that evidence is preserved and available for investigation after a security incident
   Reveal Solution Discussion Select an answer first