CSSLP Secure Software Architecture and Design Quiz

1. Which architectural approach isolates different security domains to limit the impact of a breach?

Horizontal scaling

Network segmentation

Load balancing

Caching strategy

2. Which secure design approach uses multiple independent security mechanisms to achieve a single protective goal?

Single point of control

Defense in depth

Security by design

Risk-based security

3. Secure architecture should incorporate error handling that reveals minimal information to potential attackers.

True

False

Submit

5. Which principle ensures that users can prove they performed specific actions within a system?

Non-repudiation

Authorization

Confidentiality

Availability

6. Secure architecture requires continuous validation and testing throughout the software development lifecycle.

True

False

7. Which design flaw allows an attacker to bypass security controls by exploiting unintended functionality?

Race condition

Logic bomb

Backdoor

Buffer overflow

Submit

9. What is the primary benefit of using cryptographic controls in secure architecture?

Accelerate data transmission speeds

Protect data confidentiality and integrity

Reduce hardware costs

Improve user experience

10. Separation of duties in secure design prevents a single user from having conflicting responsibilities that could compromise security.

True

False

11. Which design principle ensures that security decisions are made early in the software development lifecycle?

Security by obscurity

Secure by design

Defense in depth

Principle of least privilege

Submit

13. Which secure design pattern ensures that sensitive operations are logged and monitored?

Observer pattern

Audit logging pattern

Proxy pattern

Factory pattern

14. Secure architecture should assume that external and internal threats are equally probable.

True

False

15. What is the purpose of input validation in secure design?

Improve application performance

Prevent malicious or malformed data from entering the system

Enhance user interface aesthetics

Reduce database storage requirements

16. Which of the following is NOT a core component of STRIDE threat modeling?

Spoofing

Tampering

Encryption

Denial of Service

Submit

18. Defense in depth security strategy relies on multiple layers of security controls rather than a single perimeter defense.

True

False

19. Which architectural pattern separates presentation, business logic, and data layers?

Monolithic architecture

Microservices architecture

Model-View-Controller (MVC)

Event-driven architecture

20. What is the primary goal of threat modeling in secure architecture?

Identify all possible security threats before implementation

Eliminate all software defects

Test application performance

Document user requirements only

CSSLP Secure Software Architecture and Design Quiz

1. Which architectural approach isolates different security domains to limit the impact of a breach?

2.

What first name or nickname would you like us to use?

2. Which secure design approach uses multiple independent security mechanisms to achieve a single protective goal?

3. Secure architecture should incorporate error handling that reveals minimal information to potential attackers.

4. The ____ pattern provides a controlled interface to sensitive operations, enforcing security policies before access is granted.

5. Which principle ensures that users can prove they performed specific actions within a system?

6. Secure architecture requires continuous validation and testing throughout the software development lifecycle.

7. Which design flaw allows an attacker to bypass security controls by exploiting unintended functionality?

8. In secure design, ____ is the process of verifying the identity of a user or system.

9. What is the primary benefit of using cryptographic controls in secure architecture?

10. Separation of duties in secure design prevents a single user from having conflicting responsibilities that could compromise security.

11. Which design principle ensures that security decisions are made early in the software development lifecycle?

12. The ____ principle dictates that security mechanisms should fail securely when an error occurs.

13. Which secure design pattern ensures that sensitive operations are logged and monitored?

14. Secure architecture should assume that external and internal threats are equally probable.

15. What is the purpose of input validation in secure design?

16. Which of the following is NOT a core component of STRIDE threat modeling?

17. In secure architecture, the ____ principle restricts user access to only the minimum resources needed to perform their function.

18. Defense in depth security strategy relies on multiple layers of security controls rather than a single perimeter defense.

19. Which architectural pattern separates presentation, business logic, and data layers?

20. What is the primary goal of threat modeling in secure architecture?