CCISO Security Architecture 3

Question 1

A CISO is evaluating a proposed microservices architecture for a financial application. Which security concern is MOST unique to microservices compared to monolithic architectures?

Accepted Answer

Securing a dramatically increased number of inter-service API communication channels

Answer

Microservices architectures dramatically increase the attack surface through numerous inter-service API calls that each require authentication, encryption, and authorization controls.

Question 2

Which architectural framework defines security requirements across five concurrent viewpoints: security architecture, security processes, security technology, security assurance, and security governance?

Accepted Answer

SABSA (Sherwood Applied Business Security Architecture)

Answer

SABSA is a framework for developing risk-driven enterprise security architectures that links business requirements to security architecture through multiple layered viewpoints.

Question 3

In network security architecture, what does 'east-west traffic' refer to, and why is it a growing concern?

Accepted Answer

Lateral traffic between servers within the same data center or cloud environment

Answer

East-west traffic refers to lateral communication between workloads within the same environment; it is a concern because attackers who breach the perimeter can move laterally without being detected by perimeter controls.

Question 4

A CISO needs to secure a SCADA/ICS environment. Which architectural principle is MOST critical when integrating ICS with corporate IT networks?

Accepted Answer

Network segmentation with strict access controls and unidirectional security gateways where possible

Answer

ICS/SCADA environments require strict network segmentation from corporate IT networks, often using unidirectional data diodes, because these systems prioritize availability over confidentiality and cannot tolerate standard IT security disruptions.

Question 5

What is the security implication of using a shared responsibility model in cloud computing?

Accepted Answer

Security responsibilities are divided between the cloud provider and customer based on the service model (IaaS, PaaS, SaaS)

Answer

The shared responsibility model means security duties are split between the cloud provider (infrastructure, physical) and the customer (data, access controls, configurations) based on the service model used.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Security Architecture 3