NSE Security Architecture & Design

Question 1

What is the primary goal of security architecture?

Accepted Answer

To protect data and system integrity

Answer

The primary goal of security architecture is to design and implement systems that effectively protect an organization's assets. This involves safeguarding data from unauthorized access, modification, or destruction, and ensuring the integrity and availability of system resources. Robust security architecture aims to minimize risks and maintain trust in the system's operations.

Question 2

Which model is commonly used in security design?

Accepted Answer

CIA

Answer

The CIA triad, standing for Confidentiality, Integrity, and Availability, is a foundational model in information security design. Confidentiality ensures data is accessible only to authorized users, Integrity ensures data is accurate and unaltered, and Availability ensures systems and data are accessible when needed. These three principles guide the development of secure systems and policies.

Question 3

What is defense in depth?

Accepted Answer

Multiple overlapping security mechanisms

Answer

Defense in depth is a cybersecurity strategy that employs multiple layers of security controls to protect assets. Instead of relying on a single point of defense, it assumes that any single security mechanism might fail, so having redundant and diverse controls makes it much harder for an attacker to breach the system. This layered approach provides comprehensive protection.

Question 4

Which is NOT a principle of secure design?

Accepted Answer

Complexity over clarity

Answer

The principle of 'economy of mechanism' in secure design advocates for simplicity and clarity, meaning systems should be as simple as possible to understand and verify. Complexity often introduces hidden flaws and makes it harder to identify vulnerabilities, increasing the attack surface. Therefore, preferring complexity over clarity directly contradicts a core principle of secure design.

Question 5

Why is network segmentation important?

Accepted Answer

To isolate and control traffic between different zones

Answer

Network segmentation divides a network into smaller, isolated segments, each with its own security policies. This practice limits the lateral movement of attackers within the network, as a breach in one segment does not automatically compromise the entire network. It enhances security by allowing granular control over traffic flow and reducing the attack surface.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Security Architecture & Design