2.2 - Understand and Support Internetwork Trust Architectures SSCP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company uses a third-party SaaS application that needs to access customer data stored in the company's internal database. The company wants to ensure that the SaaS application only accesses the specific data it needs and that the connection is secure. Which approach should they use?

   • ADevelop a REST API that exposes only the required customer data and authenticate the SaaS application using OAuth.
   • BCreate a middleware service that replicates the entire database to the SaaS provider's environment.
   • CExpose the database directly to the internet and provide the vendor with the connection string.
   • DProvide the SaaS vendor with direct VPN access to the internal network.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company uses a middleware integration platform to connect its on-premises CRM system with a cloud-based marketing automation tool. The middleware authenticates to both systems. Which of the following is the primary security concern with this architecture?

   • AThe middleware may introduce latency in data transfers.
   • BThe middleware becomes a single point of failure for both systems.
   • CThe middleware holds credentials that can access both systems, creating a high-value target.
   • DThe middleware may not support the latest encryption protocols.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which component acts as an intermediary that enables different applications to communicate and share data, often translating between different data formats or protocols?

   • AAPI
   • BApp extension
   • CDatabase
   • DMiddleware
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary trust boundary that separates an organization's internal network from the public internet?

   • AThe switch
   • BThe DMZ
   • CThe firewall
   • DThe router
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has a network with a DMZ containing a web server and an internal network containing a database. The web server needs to access the database, but the security team wants to ensure that if the web server is compromised, the database is not directly accessible. Which of the following is the best approach?

   • AUse a VPN from the web server to the database.
   • BAllow the web server to access the database directly through the firewall.
   • CUse a middleware service to mediate database access from the web server.
   • DPlace the database in the DMZ as well.
   Reveal Solution Discussion Select an answer first