CASP+ Enterprise Security Architecture 2

Question 1

A large enterprise wants to implement defense-in-depth. Which combination of controls BEST represents this strategy?

Accepted Answer

Network segmentation, endpoint detection, and application-layer controls working together

Answer

Defense-in-depth layers multiple independent controls so that failure of any single layer does not result in a full compromise.

Question 2

Which design principle BEST limits privilege escalation within an enterprise architecture?

Accepted Answer

Implementing just-in-time (JIT) privileged access with approval workflows

Answer

JIT access grants elevated privileges only when needed and for a limited time, reducing the window of exposure for high-privilege accounts.

Question 3

An architect must ensure high availability for a critical authentication service. Which approach BEST balances resilience and security?

Accepted Answer

Geographically distributed active-active cluster with health checks and session replication

Answer

An active-active cluster across geographic regions provides automatic failover and load distribution while replicating session state for continuity.

Question 4

Which security architecture approach MOST effectively addresses insider threats?

Accepted Answer

User and Entity Behavior Analytics (UEBA) combined with least-privilege access

Answer

UEBA establishes behavioral baselines and alerts on anomalous activity, while least-privilege limits what insiders can access or exfiltrate.

Question 5

A CASP+ professional is designing an API gateway for microservices. Which control is MOST important for API security?

Accepted Answer

OAuth 2.0 with JWT tokens and rate limiting per client

Answer

OAuth 2.0 with short-lived JWT tokens provides delegated authorization, and rate limiting prevents abuse, together forming a strong API security baseline.

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ Enterprise Security Architecture 2