SY0-601 Architecture & Design 5

Question 1

A security architect recommends using an SDK that automatically enforces HTTPS, parameterized queries, and input sanitization for all new applications. This approach best exemplifies which principle?

Accepted Answer

Secure by default

Answer

Secure by default means that security controls are enabled out of the box, so developers must actively choose to weaken them rather than actively choose to enable them.

Question 2

An organization requires that no single administrator can both create a privileged account AND approve access for that account. Which security principle does this implement?

Accepted Answer

Separation of duties

Answer

Separation of duties divides critical tasks between multiple individuals so that no single person can commit fraud or error without collusion.

Question 3

An application is designed so that if the authentication service becomes unavailable, all access to the system is denied rather than allowed. Which design concept does this reflect?

Accepted Answer

Fail secure (fail closed)

Answer

Fail secure ensures that a system defaults to a secure, restricted state when a component fails, preventing unauthorized access during outages.

Question 4

A healthcare organization must store patient records for 7 years per HIPAA requirements. Which architectural component should be designed to enforce this retention policy automatically?

Accepted Answer

Data lifecycle management / object lock

Answer

Data lifecycle management with object lock (WORM) enforces retention policies automatically, preventing records from being deleted before the mandated retention period expires.

Question 5

Which network architecture concept uses software to dynamically provision and configure virtual network functions (firewalls, load balancers) without dedicated physical hardware?

Accepted Answer

Software-Defined Networking (SDN)

Answer

SDN decouples the control plane from the data plane, allowing network functions to be provisioned and configured programmatically through software.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Architecture & Design 5