Define the Security Architecture CSSLP Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is the primary reason that medical device security requires a different approach than traditional IT security?

   • AMedical devices have a direct impact on patient health and safety
   • BMedical devices are always connected to the internet
   • CMedical devices cannot run antivirus software
   • DMedical devices are not subject to regulatory requirements
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is a security concern when using an enterprise service bus (ESB)?

   • AEnsuring that message routing and transformation do not introduce vulnerabilities
   • BThe ESB makes all services tightly coupled
   • CThe ESB cannot handle large volumes of messages
   • DThe ESB eliminates the need for authentication
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   What is the primary security advantage of a mesh network architecture over a star topology?

   • AIt allows all nodes to share a single public key for authentication, simplifying trust management
   • BIt ensures that all traffic passes through a central logging point for easier monitoring
   • CIt eliminates the need for encryption because traffic is spread across many paths
   • DIt provides redundant paths, so a failure or compromise of one node does not isolate the rest of the network
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is the purpose of a service mesh in microservices security?

   • ATo provide a user interface for managing microservices
   • BTo replace the need for API gateways entirely
   • CTo store all service credentials in a central database
   • DTo provide a dedicated infrastructure layer for secure service-to-service communication
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A developer is building a rich internet application (RIA) that allows users to upload profile pictures. The application is vulnerable to cross-site scripting (XSS) because it does not properly sanitize the file name displayed to other users. Which of the following is the most effective mitigation for this specific XSS vulnerability?

   • ASet the HttpOnly flag on the session cookie.
   • BValidate the file name against a whitelist of allowed characters.
   • CEncode the file name using HTML entity encoding before displaying it in the browser.
   • DUse a Content Security Policy (CSP) that disallows inline scripts.
   Reveal Solution Discussion Select an answer first