CREST Security Architecture & Design 2

Question 1

What is a zero-trust security model?

Accepted Answer

Never trust, always verify — every request must be authenticated and authorized regardless of network location

Answer

Trusting all traffic inside the corporate network perimeter

Answer

Blocking all external traffic by default

Answer

Allowing only encrypted traffic on the network

Question 2

Which STRIDE threat category relates to an attacker pretending to be a legitimate user or system?

Accepted Answer

Spoofing

Answer

Tampering

Answer

Repudiation

Answer

Information disclosure

Question 3

What is the primary goal of a security architecture review?

Accepted Answer

Identifying security weaknesses in a system's design before implementation or deployment

Answer

Reviewing the source code for bugs

Answer

Testing live systems for vulnerabilities

Answer

Auditing user access logs

Question 4

Which concept ensures that no single individual can complete a critical task without involvement from another person?

Accepted Answer

Separation of duties

Answer

Least privilege

Answer

Need to know

Answer

Job rotation

Question 5

What does the term 'attack surface' refer to in security architecture?

Accepted Answer

The sum of all exploitable entry points and vulnerabilities in a system

Answer

The physical area a server occupies

Answer

The number of active firewall rules

Answer

The total bandwidth consumed by attacks

Question 6

Which security principle states that a system should fail in a secure state when an error occurs?

Accepted Answer

Fail secure (fail closed)

Answer

Fail open

Answer

Defense in depth

Answer

Least privilege