Understand How Application and Infrastructure Architectures Support Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a typical three-tier web application, which architectural component is primarily responsible for enforcing access control and business logic validation?

   • AThe application tier, which processes business logic and enforces authorization rules
   • BThe network tier, which segments traffic between the tiers
   • CThe web tier, which handles HTTP requests and serves static content
   • DThe data tier, which stores and retrieves data from the database
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is migrating its on-premises infrastructure to the cloud. The security architect must ensure that the cloud infrastructure supports the same security monitoring capabilities as the on-premises environment, but with the ability to scale. The company has a hybrid cloud environment and wants to maintain a single view of security across both. Which infrastructure architecture should be recommended?

   • AUse a cloud-native monitoring tool that does not support on-premises data sources.
   • BUse separate security monitoring tools for cloud and on-premises, and manually correlate logs.
   • CDeploy a centralized SIEM that ingests logs from both cloud and on-premises sources via agents and APIs.
   • DOnly monitor cloud resources and assume on-premises is already secure.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which trade-off is commonly associated with scaling security defenses in a cloud environment?

   • AIncreased security monitoring can add latency to application responses
   • BScaling security defenses always reduces overall cost
   • CScaling security defenses eliminates the need for incident response
   • DScaling security defenses guarantees zero vulnerabilities
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is developing a web application that handles sensitive financial data. The security architect must ensure that the application is resilient to SQL injection attacks and that a compromised application server cannot access the database directly. Which application architecture should be implemented?

   • AUse a single-tier architecture where the web server directly queries the database.
   • BUse an ORM with prepared statements and a separate database service that only the application tier can access.
   • CUse parameterized queries and place the database behind a firewall with no direct access from the application server.
   • DStore all data in encrypted files and have the application server read them directly.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which infrastructure component is specifically designed to filter traffic based on rules such as source IP, port, and protocol?

   • AStorage array
   • BNetwork firewall
   • CLoad balancer
   • DHypervisor
   Reveal Solution Discussion Select an answer first