CASE Security Architecture & Design 2

Question 1

Zero trust architecture is based on which foundational principle?

Accepted Answer

Never trust, always verify — regardless of network location or prior authentication

Answer

Zero trust eliminates implicit trust based on network location, requiring continuous verification of identity and device posture for every access request.

Question 2

The 'complete mediation' security principle requires that:

Accepted Answer

Every access request to every object be checked against the authorization policy each time

Answer

Complete mediation prevents cached or assumed permissions by ensuring each access attempt is freshly validated against the current access control policy.

Question 3

When designing secure microservices architecture, which security concern is most unique compared to monolithic applications?

Accepted Answer

Securing service-to-service communication with mutual authentication and authorization

Answer

Microservices introduce internal service-to-service API calls that must be authenticated and authorized, a communication path that does not exist in monolithic applications.

Question 4

What is the primary security benefit of incorporating an API gateway into an application architecture?

Accepted Answer

It centralizes security controls such as authentication, rate limiting, and input validation at a single entry point

Answer

An API gateway acts as a single choke point where security policies can be consistently enforced for all backend services without duplicating logic in each service.

Question 5

Security controls are broadly categorized by function. Which category describes controls designed to detect security events after they occur?

Accepted Answer

Detective controls

Answer

Detective controls (e.g., intrusion detection systems, log monitoring) identify security events that have occurred rather than preventing them beforehand.

(CASE) Certified Application Security Engineer Practice Test

(CASE) Certified Application Security Engineer Practice Test

CASE Security Architecture & Design 2