Understand How Application and Infrastructure Architectures Support Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is modernizing a legacy monolithic application into a microservices architecture. The security team wants to ensure that a compromise of one microservice does not automatically lead to lateral movement across the entire application. Which architectural approach should the security architect recommend?

   • AUse a single shared database for all microservices to simplify data access and reduce attack surface.
   • BImplement per-service network segmentation with strict ingress/egress rules and mutual TLS between services.
   • CPlace all microservices behind a single API gateway and rely on the gateway's authentication for all internal calls.
   • DDeploy all microservices in a single shared Kubernetes cluster with a flat network policy.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario best illustrates defense-in-depth integrating application and infrastructure controls?

   • AA database is backed up nightly to a separate storage system
   • BA web application uses input validation, and the network firewall blocks malicious traffic before it reaches the application
   • CAn organization uses a single strong password for all administrative accounts
   • DA server room is locked and monitored by cameras
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When scaling a web application horizontally to handle increased load, what is a primary security consideration?

   • AEnsuring consistent security configurations across all instances
   • BReducing the number of security logs to save storage
   • CEliminating the need for load balancing
   • DDisabling encryption to improve performance
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which application architecture practice directly reduces the attack surface exposed to end users?

   • AStoring all application code and data in a single tier for simplicity
   • BAllowing direct database access from the internet for faster queries
   • CPlacing the web tier in a DMZ and keeping the application and data tiers on internal networks
   • DUsing the same credentials for all tiers to simplify management
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key security advantage of a microservices architecture compared to a monolithic architecture?

   • AA compromise of one service does not automatically compromise the entire application
   • BMicroservices require no authentication between services
   • CMicroservices automatically encrypt all data in transit
   • DMicroservices eliminate the need for network security controls
   Reveal Solution Discussion Select an answer first