Define the Security Architecture CSSLP Practice Questions (Page 16)

Questions 76–80

1. 76foundation · easy

   In the context of secure software architecture, what does the term "software-defined production processes" primarily refer to?

   • AA framework for automatically generating software documentation from production code comments.
   • BThe practice of writing source code for production systems only after all security requirements have been approved by stakeholders.
   • CUsing software to control and automate manufacturing or operational workflows, where security must be designed into the software that manages these processes.
   • DA methodology where production environments are physically isolated from development environments to prevent unauthorized access.
   Reveal Solution Discussion Select an answer first
2. 77foundation · easy

   What is the primary role of an enterprise service bus (ESB)?

   • ATo provide a user interface for managing services
   • BTo store all enterprise data in a single database
   • CTo replace all application servers
   • DTo mediate communication between services by routing and transforming messages
   Reveal Solution Discussion Select an answer first
4. 78application · medium

   A company uses an enterprise service bus (ESB) to route messages between its order management system and its inventory system. The security team is concerned about a malicious actor tampering with messages as they are routed and transformed by the ESB. Which control is most effective in ensuring the integrity of messages as they pass through the ESB?

   • AImplement strict access control on the ESB's management console.
   • BEncrypt the messages with TLS between the ESB and each connected system.
   • CUse a shared secret key to encrypt all messages stored in the ESB's database.
   • DUse digital signatures on the messages so that the receiving system can verify the sender's identity and detect any tampering.
   Reveal Solution Discussion Select an answer first
5. 79foundation · easy

   In a secure boot process, what is the role of the root of trust?

   • AIt is a network service that validates the bootloader's signature against a remote server
   • BIt is a cryptographic key stored in the operating system that signs all user applications
   • CIt is a software module that encrypts the boot configuration to prevent tampering
   • DIt is the first component in the boot chain whose integrity is assumed and from which trust is extended to subsequent components
   Reveal Solution Discussion Select an answer first
6. 80foundation · easy

   What is a primary privacy risk in location-based services?

   • ATracking of user movements without consent
   • BSlower network speeds
   • CInability to use the service offline
   • DIncreased battery consumption
   Reveal Solution Discussion Select an answer first