2.1 Identify Security Architecture Approach ISSAP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is expanding its on-premises data center to include a multi-cloud environment. The security architect is defining the scope of the new security architecture. The architect must ensure that the architecture covers all environments and is aligned with business goals. Which approach best defines the scope?

   • ACreate a separate architecture for each cloud provider and the on-premises environment
   • BDefine the scope as enterprise-wide, covering on-premises and all cloud environments, and use a framework like SABSA to align it with business goals
   • CScope the architecture to the cloud environments only, since the on-premises architecture is already established
   • DScope the architecture to the network layer only, focusing on connectivity between environments
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In the STRIDE threat modeling framework, what does the 'S' stand for?

   • AScanning
   • BSnooping
   • CSniffing
   • DSpoofing
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which characteristic is most typical of a service-oriented architecture (SOA) security approach?

   • ASecurity is embedded only in the database layer.
   • BSecurity relies exclusively on physical access controls to data centers.
   • CSecurity is enforced at the network perimeter using stateful firewalls.
   • DSecurity is implemented as a set of reusable services that enforce authentication and authorization across multiple applications.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary benefit of using a reference architecture when designing security architecture for a specific domain?

   • AIt provides a proven template that can be adapted to the organization's needs.
   • BIt ensures the architecture is identical to industry standards.
   • CIt guarantees compliance with all regulations.
   • DIt eliminates the need for risk assessment.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of the Service-Oriented Modeling Framework (SOMF) in the context of security architecture?

   • ATo model the business processes that consume services.
   • BTo replace the need for threat modeling in SOA.
   • CTo define a specific set of security controls for web services.
   • DTo provide a modeling language for designing service-oriented architectures, including security considerations.
   Reveal Solution Discussion Select an answer first