CySA+ Test CySA+ Test Security Architecture and Tools

Question 1

Which security architecture principle ensures that users and systems are granted only the minimum permissions necessary to perform their functions?

Accepted Answer

Least privilege

Answer

Defense in depth

Answer

Zero trust

Answer

Separation of duties

Question 2

A CySA+ analyst is evaluating a network where every access request is verified regardless of whether the user is inside or outside the network perimeter. Which model is this?

Accepted Answer

Zero trust

Answer

Defense in depth

Answer

Perimeter security

Answer

DMZ model

Question 3

Which security tool provides real-time analysis of security alerts generated by network hardware and applications?

Accepted Answer

SIEM

Answer

IDS

Answer

Firewall

Answer

Proxy server

Question 4

Which architecture concept involves placing publicly accessible servers in a network segment separated from the internal network?

Accepted Answer

DMZ (Demilitarized Zone)

Answer

Zero trust

Answer

VPN tunneling

Answer

Network segmentation via VLAN only

Question 5

Which tool is used to inspect and filter traffic at the application layer, providing deeper visibility than a traditional packet filter firewall?

Accepted Answer

Next-Generation Firewall (NGFW)

Answer

Intrusion Detection System

Answer

Network tap

Answer

Proxy ARP

Question 6

Which security design principle recommends using multiple overlapping security controls so that the failure of one does not compromise the entire system?

Accepted Answer

Defense in depth

Answer

Least privilege

Answer

Separation of duties

Answer

Fail open