SE Security Architecture and Design 2 — Questions and Answers
Question 1: What is a Secure Software Development Lifecycle (SSDLC), and why is it important?
- A process to automate software releases; reduces deployment time
- An approach integrating security activities into every phase of software development to find and fix flaws early (Correct answer)
- A compliance framework for cloud deployments; required by PCI-DSS
- A testing methodology for QA teams; optional for security teams
Correct answer: An approach integrating security activities into every phase of software development to find and fix flaws early
SSDLC integrates security requirements, design reviews, code analysis, and testing throughout development, making security a built-in property rather than an afterthought.
Question 2: Which STRIDE category describes an attacker gaining capabilities or permissions beyond what was intended?
- Spoofing
- Tampering
- Repudiation
- Elevation of privilege (Correct answer)
Correct answer: Elevation of privilege
The 'E' in STRIDE — Elevation of Privilege — covers scenarios where an attacker gains unauthorized access rights beyond their intended permission level.
Question 3: What is the primary goal of a security architecture review?
- Verify hardware inventory
- Ensure the system design meets security requirements and identify architectural weaknesses before implementation (Correct answer)
- Automate patch deployment
- Approve firewall rules
Correct answer: Ensure the system design meets security requirements and identify architectural weaknesses before implementation
A security architecture review evaluates the design against security principles and requirements to catch structural weaknesses early in the development lifecycle.
Question 4: In cloud security architecture, what does the Shared Responsibility Model define?
- How cloud costs are split between teams
- Which security responsibilities belong to the cloud provider vs. the customer (Correct answer)
- The SLA for cloud uptime
- How encryption keys are shared
Correct answer: Which security responsibilities belong to the cloud provider vs. the customer
The Shared Responsibility Model clarifies that cloud providers secure the underlying infrastructure while customers are responsible for their data, applications, and access controls.
Question 5: Which design approach reduces the impact of a single component compromise by running components with only the permissions they need for their specific function?
- Monolithic architecture
- Least privilege / minimal footprint per component (Correct answer)
- Defense in depth at the perimeter only
- Full-trust internal networking
Correct answer: Least privilege / minimal footprint per component
Applying least privilege at the component level ensures that even if one microservice or process is compromised, its blast radius is limited.
Question 6: What is data classification and how does it support security architecture decisions?
- Sorting files by date; it determines backup schedules
- Categorizing data by sensitivity level; it drives access controls, encryption, and handling requirements (Correct answer)
- Tagging data by file type; it determines storage costs
- Indexing data for search; it improves query performance
Correct answer: Categorizing data by sensitivity level; it drives access controls, encryption, and handling requirements
Data classification assigns sensitivity tiers (e.g., Public, Internal, Confidential, Restricted) that inform which controls, encryption standards, and access policies apply.
SE Security Architecture and Design 2
What is a Secure Software Development Lifecycle (SSDLC), and why is it important?