Enterprise Security Architecture Flashcards

An organization is merging with another company and needs to integrate their IT systems securely. Which approach BEST supports secure integration while minimizing risk?

Answer: Deploy a federated identity model with trust boundaries between organizations

A federated identity model allows each organization to maintain its own identity store while establishing controlled trust, minimizing the attack surface during merger.

A CASP+ architect must design a zero-trust network for a financial institution. Which control is MOST critical to enforce zero-trust principles?

Answer: Continuous verification of identity and device posture for every request

Zero trust requires continuous verification of identity and device health for every access request, regardless of network location.

Which security architecture pattern BEST reduces the blast radius of a compromised internal service?

Answer: Microsegmentation with per-service access controls

Microsegmentation isolates services so that a compromised component cannot laterally move to other services without explicit authorization.

A security architect is evaluating a new SaaS application. Which document MOST effectively communicates security requirements to the vendor?

Answer: Security Requirements Traceability Matrix (SRTM)

An SRTM maps each security requirement to specific controls, acceptance criteria, and verification methods, making vendor compliance measurable.

An enterprise deploys a SIEM. Which integration provides the MOST actionable threat intelligence for the architecture?

Answer: Threat intelligence platform (TIP) with indicator enrichment

A TIP enriches SIEM events with curated indicators of compromise (IOCs) and context, enabling faster, higher-fidelity alerting.

Which architectural control BEST protects against supply chain attacks on third-party software libraries?

Answer: Software composition analysis (SCA) integrated into the CI/CD pipeline

SCA tools scan dependencies for known vulnerabilities and license issues at build time, catching supply chain risks before deployment.