CyberVista Security Architecture and Design Questions and Answers

Question 1

A financial services company is designing a new system to handle sensitive customer transaction data.
The primary security concern is to prevent unauthorized modification of this data by both internal and external actors.
Which security model would be most appropriate to ensure data integrity?

Accepted Answer

Biba Model

Answer

Bell-LaPadula Model

Answer

Take-Grant Model

Answer

Access Control Matrix

Question 2

A security architect is applying the principle of 'least privilege' to a new application's design. Which of the following actions BEST exemplifies this principle?

Accepted Answer

Granting a user account only the specific permissions needed to perform its intended function.

Answer

Encrypting all data both in transit and at rest.

Answer

Requiring two separate administrators to approve a high-risk change.

Answer

Ensuring the application defaults to the most secure settings upon installation.

Question 3

Which of the following enterprise architecture frameworks is specifically focused on being business-driven and uses a six-layered model (Contextual, Conceptual, Logical, Physical, Component, and Operational) to align security with business objectives?

Accepted Answer

Sherwood Applied Business Security Architecture (SABSA)

Answer

The Open Group Architecture Framework (TOGAF)

Answer

Zachman Framework

Answer

Control Objectives for Information and Related Technologies (COBIT)

Question 4

A software development team is building a critical system where every request for a resource must be validated at the time of the request, regardless of whether previous requests from the same user were approved. This practice is a direct implementation of which secure design principle?

Accepted Answer

Complete Mediation

Answer

Open Design

Answer

Economy of Mechanism

Answer

Separation of Privilege

Question 5

An organization is using the OSI model to guide its layered security strategy. At which layer would a security architect primarily focus on implementing IPsec to secure network communications?

Accepted Answer

Layer 3 (Network Layer)

Answer

Layer 2 (Data Link Layer)

Answer

Layer 7 (Application Layer)

Answer

Layer 4 (Transport Layer)

Question 6

The Zachman Framework provides a structure for enterprise architecture by using a matrix that relates different stakeholder perspectives to various aspects of the enterprise. Which of the following correctly identifies the two dimensions of the Zachman Framework matrix?

Accepted Answer

Stakeholder Perspectives (Rows) and Interrogatives/Abstractions (Columns)

Answer

Business Drivers and Technology Constraints

Answer

Security Controls and Risk Levels

Answer

Phases of the SDLC and Data Classification Levels

A financial services company is designing a new system to handle sensitive customer transaction data.The primary security concern is to prevent unauthorized modification of this data by both internal and external actors.Which security model would be most appropriate to ensure data integrity?

A financial services company is designing a new system to handle sensitive customer transaction data.
The primary security concern is to prevent unauthorized modification of this data by both internal and external actors.
Which security model would be most appropriate to ensure data integrity?