Understand How Application and Infrastructure Architectures Support Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A startup is choosing between a monolithic and a microservices architecture for a new application. The security team is concerned about the ability to isolate a security incident and scale security controls independently. Which architectural pattern best addresses these concerns?

   • AServerless functions with no network segmentation.
   • BMicroservices architecture with per-service security controls and independent scaling.
   • CA single container with all application components.
   • DMonolithic architecture with a single security perimeter.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is adopting a microservices architecture and wants to implement defense-in-depth. The security architect must ensure that a compromised service cannot access other services or the data they hold. Which combination of controls should be implemented?

   • ARely on the container runtime's default isolation.
   • BNetwork segmentation and service-to-service authentication.
   • CA single shared secret for all services to simplify authentication.
   • DPublicly accessible service endpoints for ease of integration.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is scaling its application to handle a global user base. The security architect must ensure that security controls are distributed to reduce latency and avoid a single point of failure. Which infrastructure architecture should be recommended?

   • AUse a content delivery network (CDN) for static content and a centralized security monitoring hub.
   • BDeploy the application in multiple regions with regional security controls and a centralized SIEM for correlation.
   • CDeploy the application and security controls in a single region to simplify management.
   • DUse a single, high-capacity security appliance in one region.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is evaluating whether to use a monolithic or microservices architecture for a new application. The security architect notes that the team has limited security expertise and wants to minimize the attack surface. Which architecture should be recommended?

   • AServerless functions with no network controls.
   • BMonolithic architecture with a single security perimeter.
   • CA hybrid architecture with both monolithic and microservices components.
   • DMicroservices architecture with many small services.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services company is deploying a new web application in a public cloud. The compliance team requires that all data be encrypted at rest and in transit, and that the application be isolated from other tenants. Which infrastructure architecture should the security architect choose?

   • AA shared multi-tenant platform with encryption enabled for storage and network traffic.
   • BA public cloud region with server-side encryption only for the database.
   • CAn on-premises data center with no cloud connectivity to ensure physical isolation.
   • DA dedicated virtual private cloud (VPC) with encryption at rest and TLS for all traffic.
   Reveal Solution Discussion Select an answer first