Enterprise Security Architecture Flashcards
6 cards from real CASP+ practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Enterprise Security Architecture flashcards as text
A large enterprise wants to implement defense-in-depth. Which combination of controls BEST represents this strategy?
Answer: Network segmentation, endpoint detection, and application-layer controls working together
Defense-in-depth layers multiple independent controls so that failure of any single layer does not result in a full compromise.
Which design principle BEST limits privilege escalation within an enterprise architecture?
Answer: Implementing just-in-time (JIT) privileged access with approval workflows
JIT access grants elevated privileges only when needed and for a limited time, reducing the window of exposure for high-privilege accounts.
An architect must ensure high availability for a critical authentication service. Which approach BEST balances resilience and security?
Answer: Geographically distributed active-active cluster with health checks and session replication
An active-active cluster across geographic regions provides automatic failover and load distribution while replicating session state for continuity.
Which security architecture approach MOST effectively addresses insider threats?
Answer: User and Entity Behavior Analytics (UEBA) combined with least-privilege access
UEBA establishes behavioral baselines and alerts on anomalous activity, while least-privilege limits what insiders can access or exfiltrate.
A CASP+ professional is designing an API gateway for microservices. Which control is MOST important for API security?
Answer: OAuth 2.0 with JWT tokens and rate limiting per client
OAuth 2.0 with short-lived JWT tokens provides delegated authorization, and rate limiting prevents abuse, together forming a strong API security baseline.
Which network architecture decision BEST prevents lateral movement after an initial compromise?
Answer: Implementing east-west traffic inspection between network segments
Inspecting east-west (internal) traffic between segments allows detection and blocking of lateral movement that perimeter controls cannot see.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- comptia.org — Score release, renewal, retake fee, retake policy, score validity, eligibility, exam format, passing score, time limit, fees · verified Oct 2026