SE Security Architecture and Design

Question 1

What is the core principle of Zero Trust Architecture?

Accepted Answer

Never trust, always verify — authenticate and authorize every request regardless of network location

Answer

Zero Trust assumes breach and requires continuous verification of every user, device, and request regardless of whether it originates inside or outside the network.

Question 2

Which security design principle advocates building multiple layers of defense so that if one layer fails, others continue to protect?

Accepted Answer

Defense in depth

Answer

Defense in depth layers technical, administrative, and physical controls so an attacker must bypass multiple independent defenses to succeed.

Question 3

What does 'fail secure' (fail closed) mean in security design?

Accepted Answer

When a system fails, it defaults to a secure state that denies access rather than granting it

Answer

Fail secure means a system in an error or failure state denies access by default, preventing security bypasses through induced failures.

Question 4

Which security design principle recommends that security mechanisms should be as simple as possible to facilitate verification and reduce attack surface?

Accepted Answer

Economy of mechanism

Answer

Economy of mechanism (simplicity) reduces the likelihood of design and implementation flaws by keeping security mechanisms small and understandable.

Question 5

What is threat modeling and when should it ideally be performed?

Accepted Answer

A structured process to identify, quantify, and address security threats; ideally during the design phase

Answer

Threat modeling systematically identifies threats, attack vectors, and mitigations early in the design phase when changes are least costly.

SE - Security Engineer Practice Test

SE - Security Engineer Practice Test

SE Security Architecture and Design