CASE Security Architecture & Design

Question 1

What is the primary purpose of the 'defense in depth' strategy in application security architecture?

Accepted Answer

To apply multiple overlapping security layers so that failure of one control does not lead to total compromise

Answer

Defense in depth uses layered, overlapping controls so that bypassing one layer still leaves attackers facing additional security barriers.

Question 2

Which security design principle requires that a system's default configuration be secure without requiring additional hardening steps by the user?

Accepted Answer

Secure by default

Answer

Secure by default means the out-of-the-box configuration provides security, and less-secure options must be explicitly enabled rather than disabled.

Question 3

In security architecture, 'separation of duties' primarily mitigates which type of risk?

Accepted Answer

Insider threats and fraud by requiring multiple parties for sensitive operations

Answer

Separation of duties prevents any single individual from having end-to-end control over a critical process, reducing insider threat and fraud.

Question 4

Which security architecture principle aims to reduce the number of ways an attacker can interact with or exploit a system?

Accepted Answer

Minimize attack surface

Answer

Minimizing the attack surface limits exposed entry points, interfaces, and functionality, giving attackers fewer opportunities to find vulnerabilities.

Question 5

In security architecture, a 'trust boundary' is best defined as:

Accepted Answer

A point in a system where data transitions between areas with different trust levels, requiring validation

Answer

Trust boundaries mark where data moves between different trust zones, and they are key locations where input validation and access control must be enforced.

(CASE) Certified Application Security Engineer Practice Test

(CASE) Certified Application Security Engineer Practice Test

CASE Security Architecture & Design