CySA+ Test CySA+ Test Security Architecture and Tools 1

Question 1

Which security architecture principle ensures that users and systems are granted only the minimum permissions necessary to perform their functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits access rights to only what is strictly required, reducing the attack surface if an account is compromised.

Question 2

A CySA+ analyst is evaluating a network where every access request is verified regardless of whether the user is inside or outside the network perimeter. Which model is this?

Accepted Answer

Zero trust

Answer

Zero trust operates on the principle of 'never trust, always verify,' requiring continuous authentication and authorization for every access request.

Question 3

Which security tool provides real-time analysis of security alerts generated by network hardware and applications?

Accepted Answer

SIEM

Answer

A SIEM (Security Information and Event Management) system aggregates and analyzes log data from multiple sources to detect threats in real time.

Question 4

Which architecture concept involves placing publicly accessible servers in a network segment separated from the internal network?

Accepted Answer

DMZ (Demilitarized Zone)

Answer

A DMZ is a perimeter network that exposes external-facing services while shielding the internal network from direct external access.

Question 5

Which tool is used to inspect and filter traffic at the application layer, providing deeper visibility than a traditional packet filter firewall?

Accepted Answer

Next-Generation Firewall (NGFW)

Answer

An NGFW performs deep packet inspection at the application layer, identifying and controlling applications regardless of port or protocol.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test CySA+ Test Security Architecture and Tools 1