SY0-601 Architecture & Design 4

Question 1

A security team implements a system that automatically revokes and rotates credentials when anomalous API usage is detected. This is an example of which security architecture principle?

Accepted Answer

Automated response and orchestration

Answer

Automated response and orchestration (SOAR) reduces dwell time by triggering remediation actions such as credential rotation without human intervention.

Question 2

Which data security technique replaces sensitive data elements with non-sensitive placeholders that retain the format but have no exploitable value outside the specific system?

Accepted Answer

Tokenization

Answer

Tokenization substitutes sensitive data (e.g., a credit card number) with a token that is meaningless outside the tokenization system, reducing PCI DSS scope.

Question 3

An enterprise CISO wants to ensure that cloud-hosted workloads adhere to security baselines continuously, not just at deployment time. Which tool category addresses this requirement?

Accepted Answer

Cloud Security Posture Management (CSPM)

Answer

CSPM tools continuously monitor cloud environments for configuration drift and compliance violations against defined security baselines.

Question 4

A company needs employees to prove their identity using something they know, something they have, and something they are before accessing sensitive systems. This is an example of:

Accepted Answer

Multi-factor authentication (MFA)

Answer

MFA combines multiple authentication factors—knowledge, possession, and inherence—to significantly reduce the risk of unauthorized access.

Question 5

A network architect is designing a campus with multiple buildings. To prevent a broadcast storm in one building from affecting others, which design technique should be used?

Accepted Answer

VLAN segmentation per building

Answer

VLANs logically isolate broadcast domains so that a storm or failure in one VLAN does not propagate to VLANs in other buildings.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Architecture & Design 4