Understand How Application and Infrastructure Architectures Support Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is moving its infrastructure to the cloud and wants to ensure that security monitoring scales with the infrastructure. The security architect needs to collect logs from all compute instances, storage, and network devices. Which infrastructure architecture should be recommended?

   • AEnable logging on each resource and store logs locally on each instance.
   • BOnly log security events from the network perimeter.
   • CUse a centralized logging service that ingests logs from all resources via agents and APIs.
   • DStore logs in a separate bucket without any analysis tools.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which architectural pattern is characterized by a single codebase deployed as one unit, and has the security implication that a vulnerability in any module can affect the entire application?

   • AEvent-driven architecture
   • BMicroservices architecture
   • CMonolithic architecture
   • DServerless architecture
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is designing a multi-tier web application with a public-facing web tier, an application tier, and a database tier. The security architect wants to ensure that even if the web tier is compromised, the attacker cannot directly access the database. Which defense-in-depth strategy should be implemented?

   • AEncrypt all data in the database and assume encryption is sufficient to protect it.
   • BPlace the web, application, and database tiers in the same subnet and rely on host-based firewalls.
   • CUse separate subnets for each tier with network ACLs and security groups that only allow necessary traffic.
   • DExpose the database directly to the internet with strong authentication.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is scaling its application to handle increased user demand. The security architect must ensure that security controls do not become a bottleneck. Which scaling strategy should be adopted?

   • AScale security controls horizontally, such as adding more WAF instances and log processors.
   • BReduce the number of security checks to improve performance.
   • CUse a single, high-capacity security appliance for all traffic.
   • DScale the application tier but keep the security appliance at a fixed capacity.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise is redesigning its customer-facing application to improve scalability and security. The current architecture is a monolithic application with a single database. The security team wants to reduce the blast radius of a potential breach, but the operations team is concerned about the operational complexity of managing many services. The company also has a strict budget. Which architectural approach best balances these competing concerns?

   • ASplit the application into a few larger services (a mini-service architecture) with network segmentation.
   • BMove to a serverless architecture with no dedicated infrastructure.
   • CKeep the monolithic architecture but add network segmentation and a WAF.
   • DRefactor the application into microservices with per-service security controls.
   Reveal Solution Discussion Select an answer first