CASE Security Architecture & Design

Question 1

What is the primary purpose of the 'defense in depth' strategy in application security architecture?

Accepted Answer

To apply multiple overlapping security layers so that failure of one control does not lead to total compromise

Answer

To rely on a single strong perimeter to block all attacks

Answer

To encrypt all data at rest and in transit using a single algorithm

Answer

To implement one comprehensive security policy that covers all threats

Question 2

Which security design principle requires that a system's default configuration be secure without requiring additional hardening steps by the user?

Accepted Answer

Secure by default

Answer

Principle of least privilege

Answer

Economy of mechanism

Answer

Separation of duties

Question 3

In security architecture, 'separation of duties' primarily mitigates which type of risk?

Accepted Answer

Insider threats and fraud by requiring multiple parties for sensitive operations

Answer

SQL injection attacks targeting the database layer

Answer

Denial-of-service attacks on the application

Answer

Data loss caused by accidental deletion

Question 4

Which security architecture principle aims to reduce the number of ways an attacker can interact with or exploit a system?

Accepted Answer

Minimize attack surface

Answer

Defense in depth

Answer

Complete mediation

Answer

Fail-safe defaults

Question 5

In security architecture, a 'trust boundary' is best defined as:

Accepted Answer

A point in a system where data transitions between areas with different trust levels, requiring validation

Answer

A firewall rule set that permits only trusted IP addresses

Answer

A certificate authority that establishes trusted identities

Answer

A security policy document listing trusted internal users

Question 6

Which network architecture pattern creates an intermediate zone between the public internet and an internal network to host publicly accessible services?

Accepted Answer

Demilitarized Zone (DMZ)

Answer

Microservices mesh

Answer

Model-View-Controller (MVC) pattern

Answer

Service-oriented architecture (SOA)

Question 7

The 'fail-safe defaults' security design principle states that:

Accepted Answer

Access should be denied by default unless explicitly and specifically granted

Answer

Systems should automatically recover and restore functionality after any failure

Answer

All system failures must be logged immediately for forensic analysis

Answer

Critical systems must maintain redundant backups at all times