Security Architecture Flashcards

Which security architecture principle ensures that a compromised component cannot be used to gain unauthorized access to other components?

Answer: Isolation and containment

Isolation and containment limits the blast radius of a compromise by preventing lateral movement between components.

In the Zachman Framework, which column addresses the question 'How does the system work?'

Answer: Function column

The Function column in the Zachman Framework addresses processes and how the system operates.

A system that defaults to denying access when an error occurs is implementing which security principle?

Answer: Fail-secure

Fail-secure (or fail-safe) ensures systems default to a secure state — denying access — upon failure.

Which of the following best describes a Reference Monitor?

Answer: An abstract machine that mediates all access between subjects and objects

A Reference Monitor is an abstract machine concept that intercepts every access attempt between subjects and objects to enforce policy.

The Clark-Wilson integrity model primarily addresses which type of environment?

Answer: Commercial transaction integrity

Clark-Wilson was designed for commercial environments, ensuring data integrity through well-formed transactions and separation of duties.

Which architectural component validates that all security controls are properly tested and verified before deployment?

Answer: Trusted Computing Base (TCB)

The Trusted Computing Base encompasses all hardware, software, and firmware that enforce the system security policy.

In a zero trust architecture, what is the role of the Policy Decision Point (PDP)?

Answer: Evaluates access requests against policy and grants or denies access

The PDP evaluates access requests using identity, context, and policy to make authorization decisions in a zero trust model.