2.1 Identify Security Architecture Approach ISSAP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a reference architecture that can be used as a template for security architecture in cloud environments?

   • ANIST Cloud Computing Security Reference Architecture
   • BISO 27001 standard
   • CSABSA framework
   • DTOGAF ADM
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What does the Common Vulnerability Scoring System (CVSS) provide?

   • AA list of all known vulnerabilities in a system.
   • BA tool for automatically patching vulnerabilities.
   • CA standardized method for rating the severity of security vulnerabilities.
   • DA framework for threat modeling.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of an architecture blueprint in security architecture?

   • ATo provide a high-level overview of the security architecture components and their relationships.
   • BTo list all security vulnerabilities in the system.
   • CTo replace the need for detailed design documents.
   • DTo serve as a legal contract between the organization and its customers.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an example of threat intelligence that could be integrated into security architecture modeling?

   • AA list of all software licenses in the organization.
   • BA list of known malware hashes and associated attacker infrastructure.
   • CA vendor's product pricing sheet.
   • DA company's internal employee directory.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which STRIDE category is concerned with an attacker modifying data or code without authorization?

   • ARepudiation
   • BInformation Disclosure
   • CSpoofing
   • DTampering
   Reveal Solution Discussion Select an answer first