Understand How Application and Infrastructure Architectures Support Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is developing a web application that processes sensitive user data. The security architect wants to ensure that even if the web server is compromised, the attacker cannot access the raw data in the database. Which application architecture pattern should be implemented?

   • AEmbed database credentials in the web application code for simplicity.
   • BStore data in plaintext in the database and rely on network security.
   • CUse a single-tier architecture where the web server directly queries the database.
   • DUse a separate application tier that performs data encryption and decryption, with the web tier having no direct database access.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does infrastructure segmentation (e.g., VLANs or subnets) contribute to cybersecurity defenses?

   • AIt encrypts all data at rest in the storage subsystem
   • BIt provides a backup mechanism for critical data
   • CIt automatically patches all operating systems in the environment
   • DIt limits lateral movement by restricting communication between different network zones
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An e-commerce company expects traffic spikes during sales events. The security architect must ensure that the application can scale to handle increased load without weakening security controls. Which approach should be taken?

   • AManually add new servers and configure security after the spike begins.
   • BUse auto-scaling groups with pre-configured security groups and automated patching.
   • CScale up the existing virtual machines to handle the load, keeping the same security configuration.
   • DDisable security monitoring during peak times to reduce overhead.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is deploying a multi-tier application and wants to implement defense-in-depth. The security architect must ensure that a compromise in the web tier does not lead to data exfiltration from the database. The company also wants to minimize the impact of a DDoS attack. Which combination of controls should be implemented?

   • ADatabase encryption and a CDN.
   • BOnly a WAF and strong authentication.
   • CNetwork segmentation and a CDN.
   • DNetwork segmentation, WAF, and database encryption.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Why is it important for application and infrastructure security controls to be integrated rather than implemented in isolation?

   • AIntegration reduces the need for security testing
   • BIntegration eliminates the need for monitoring and logging
   • CIntegration guarantees that all attacks will be prevented
   • DIntegration ensures that a failure in one control does not leave the system completely unprotected
   Reveal Solution Discussion Select an answer first