CASP+ Enterprise Security Architecture

Question 1

An organization is merging with another company and needs to integrate their IT systems securely. Which approach BEST supports secure integration while minimizing risk?

Accepted Answer

Deploy a federated identity model with trust boundaries between organizations

Answer

A federated identity model allows each organization to maintain its own identity store while establishing controlled trust, minimizing the attack surface during merger.

Question 2

A CASP+ architect must design a zero-trust network for a financial institution. Which control is MOST critical to enforce zero-trust principles?

Accepted Answer

Continuous verification of identity and device posture for every request

Answer

Zero trust requires continuous verification of identity and device health for every access request, regardless of network location.

Question 3

Which security architecture pattern BEST reduces the blast radius of a compromised internal service?

Accepted Answer

Microsegmentation with per-service access controls

Answer

Microsegmentation isolates services so that a compromised component cannot laterally move to other services without explicit authorization.

Question 4

A security architect is evaluating a new SaaS application. Which document MOST effectively communicates security requirements to the vendor?

Accepted Answer

Security Requirements Traceability Matrix (SRTM)

Answer

An SRTM maps each security requirement to specific controls, acceptance criteria, and verification methods, making vendor compliance measurable.

Question 5

An enterprise deploys a SIEM. Which integration provides the MOST actionable threat intelligence for the architecture?

Accepted Answer

Threat intelligence platform (TIP) with indicator enrichment

Answer

A TIP enriches SIEM events with curated indicators of compromise (IOCs) and context, enabling faster, higher-fidelity alerting.

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ Enterprise Security Architecture