CREST Security Architecture & Design

Question 1

What is the principle of least privilege in security architecture?

Accepted Answer

Granting users only the minimum access rights needed for their role

Answer

Giving administrators full access to all systems

Answer

Allowing all users read access by default

Answer

Restricting network access to a single VLAN

Question 2

Which security architecture model enforces strict access controls based on data classification and clearance levels?

Accepted Answer

Bell-LaPadula model

Answer

Biba model

Answer

Clark-Wilson model

Answer

Brewer-Nash model

Question 3

What is defense in depth?

Accepted Answer

Layering multiple security controls so that failure of one does not compromise the whole system

Answer

Using a single highly secure firewall

Answer

Encrypting all data at rest and in transit

Answer

Conducting regular penetration tests

Question 4

What does a DMZ (Demilitarized Zone) in network architecture provide?

Accepted Answer

A segmented network zone for publicly accessible services, isolated from the internal network

Answer

A zone where no security controls are enforced

Answer

A backup network for disaster recovery

Answer

A VLAN reserved for management traffic

Question 5

Which architecture pattern separates an application into presentation, business logic, and data layers?

Accepted Answer

Three-tier architecture

Answer

Monolithic architecture

Answer

Peer-to-peer architecture

Answer

Serverless architecture

Question 6

What is the purpose of network segmentation in security architecture?

Accepted Answer

To limit the lateral movement of attackers by isolating network zones

Answer

To increase network throughput and reduce latency

Answer

To simplify network management

Answer

To enable full mesh connectivity between all hosts