Security+ Architecture Quiz Design & Concepts

1. Which encryption standard is most commonly used for protecting data at rest in enterprise environments?

DES

AES-256

RC4

MD5

2. Which architectural consideration ensures that security controls do not significantly impact system performance?

Security versus usability balance

Cost-benefit analysis

Regulatory compliance

Vendor selection

3. In enterprise security architecture, what is the purpose of implementing role-based access control (RBAC)?

Grant all users administrative access

Assign permissions based on job responsibilities

Eliminate the need for passwords

Simplify IT management

4. What is the primary function of a Security Information and Event Management (SIEM) system?

Prevent all attacks

Collect and analyze security logs from multiple sources

Encrypt network traffic

Manage firewall rules

5. Which security control type is implemented before a security incident occurs?

Detective controls

Corrective controls

Preventive controls

Compensating controls

6. In secure system design, what does 'fail securely' mean?

System continues operating after failure

System defaults to a secure state when it fails

System alerts administrators immediately

System backs up data before failing

7. Which component of Security Architecture (Security+) evaluates the likelihood and impact of security threats?

Risk assessment

Vulnerability scanning

Penetration testing

System hardening

8. In secure architecture, what does 'defense in depth' require?

A single, powerful firewall

Multiple layers of security controls

Only network-based protections

Encryption on all devices

9. What is the primary benefit of implementing a security architecture framework like NIST CSF?

Eliminates all security risks

Provides structured guidance for managing cybersecurity risk

Guarantees compliance with all regulations

Reduces IT staff requirements

10. In a secure architecture, what does a bastion host primarily protect?

Internal network from direct internet exposure

Database servers

Backup storage

User workstations

11. Which architectural pattern uses multiple authentication factors to verify user identity?

Single sign-on

Multifactor authentication

Biometric authentication

Certificate-based authentication

12. Zero trust architecture assumes that no user or device is trustworthy by default. What must be verified continuously?

Identity and device posture

Only user credentials

Network location

Hardware manufacturer

13. What is the primary purpose of threat modeling in secure architecture design?

Identify vulnerabilities before deployment

Reduce operational costs

Increase system performance

Comply with regulatory requirements

14. Which security principle limits user access to only the resources needed to perform their job?

Need to know

Least privilege

Separation of duties

Defense in depth

15. A DMZ is typically placed between which two network zones?

Internal LAN and the internet

Two internal subnets

Firewall and IDS

Database and application servers

16. Which framework provides guidance on secure system design and includes controls for protecting information?

NIST Cybersecurity Framework

ISO 27001

COBIT

All of the above

17. In the CIA triad, which component ensures that data is accurate and unaltered?

Confidentiality

Integrity

Availability

Authentication

18. What is the primary goal of network segmentation in Security Architecture (Security+)?

Increase bandwidth

Limit lateral movement and contain breaches

Reduce hardware costs

Simplify network management

19. Which architectural principle ensures that a system remains functional even if one security layer is compromised?