CMA Risk Management & Security Architecture 2

Question 1

Which security architecture concept ensures that users and systems are granted only the minimum permissions necessary to perform their required functions?

Accepted Answer

Least Privilege

Answer

The Principle of Least Privilege limits access rights for users, accounts, and computing processes to only what is strictly required for their role.

Question 2

A Zero Trust Architecture (ZTA) model assumes which foundational principle about network location and user identity?

Accepted Answer

No user or device is trusted by default, regardless of location

Answer

Zero Trust operates on the principle of 'never trust, always verify,' requiring continuous authentication and authorization for every user and device.

Question 3

In a risk register, what does 'residual risk' refer to?

Accepted Answer

Risk remaining after controls have been applied

Answer

Residual risk is the level of risk that remains after security controls and mitigations have been implemented, which organizations must accept or further reduce.

Question 4

Which NIST publication provides a comprehensive catalog of security and privacy controls for federal information systems, commonly used in US government architecture?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides a catalog of security and privacy controls organized into families for protecting federal information systems and organizations.

Question 5

Which architectural approach segments a network into smaller isolated zones to contain breaches and limit lateral movement by attackers?

Accepted Answer

Micro-segmentation

Answer

Micro-segmentation divides the network into fine-grained security zones, preventing attackers from moving laterally between workloads after an initial breach.

(CMA) Certified Master Architect Practice Test

(CMA) Certified Master Architect Practice Test

CMA Risk Management & Security Architecture 2