CASP+ Enterprise Security Architecture

Question 1

An organization is merging with another company and needs to integrate their IT systems securely. Which approach BEST supports secure integration while minimizing risk?

Accepted Answer

Deploy a federated identity model with trust boundaries between organizations

Answer

Immediately merge all systems into a single domain

Answer

Share all credentials between both organizations during transition

Answer

Disable all firewalls to allow unrestricted communication during migration

Question 2

A CASP+ architect must design a zero-trust network for a financial institution. Which control is MOST critical to enforce zero-trust principles?

Accepted Answer

Continuous verification of identity and device posture for every request

Answer

Perimeter firewall with stateful inspection

Answer

VPN tunnels for all remote users

Answer

Static ACLs on all network switches

Question 3

Which security architecture pattern BEST reduces the blast radius of a compromised internal service?

Accepted Answer

Microsegmentation with per-service access controls

Answer

Flat network with shared authentication

Answer

Single sign-on across all services

Answer

Network address translation (NAT) at the perimeter

Question 4

A security architect is evaluating a new SaaS application. Which document MOST effectively communicates security requirements to the vendor?

Accepted Answer

Security Requirements Traceability Matrix (SRTM)

Answer

Memorandum of Understanding (MOU)

Answer

Non-Disclosure Agreement (NDA)

Answer

Service Level Agreement (SLA) with uptime guarantees

Question 5

An enterprise deploys a SIEM. Which integration provides the MOST actionable threat intelligence for the architecture?

Accepted Answer

Threat intelligence platform (TIP) with indicator enrichment

Answer

Syslog feeds from all endpoints

Answer

Email alerts from antivirus vendors

Answer

Manual log review by the SOC team

Question 6

Which architectural control BEST protects against supply chain attacks on third-party software libraries?

Accepted Answer

Software composition analysis (SCA) integrated into the CI/CD pipeline

Answer

Blocking all internet access from build servers

Answer

Requiring vendors to sign NDAs

Answer

Using only open-source libraries