Enterprise Security Architecture (SecurityX) Quiz

1. Which of the following is a common vulnerability in enterprise architectures?

Excessive security controls

Lack of network segmentation

Over-encryption

Too many security administrators

2. Which concept ensures that actions can be traced back to a specific user?

Authorization

Authentication

Accountability

Availability

3. What is the primary purpose of a Security Baseline in enterprise architecture?

To identify all vulnerabilities

To establish minimum security standards across systems

To prevent all attacks

To eliminate user access

4. Which vulnerability assessment technique involves authorized simulated attacks?

Vulnerability scanning

Penetration testing

Passive monitoring

Log analysis

5. In Enterprise Security Architecture (SecurityX), what is a security domain?

A DNS domain name

A logical grouping of systems with similar security requirements

A physical data center location

A type of encryption algorithm

6. What does a Security Incident Response Plan primarily define?

How to prevent all security incidents

Steps to detect, respond to, and recover from security incidents

How to prosecute attackers

Hardware requirements for security

7. Which authentication factor involves something you have?

Password

Biometric

Security token or smart card

8. What is the primary advantage of implementing network segmentation?

Increases network speed

Limits lateral movement of threats

Reduces hardware costs

Simplifies network management

9. Which standard addresses business continuity and disaster recovery planning?

ISO/IEC 27001

ISO/IEC 22301

NIST SP 800-53

CIS Critical Security Controls

10. What does the principle of least privilege mean?

Users should have maximum access for efficiency

Users should have only the minimum access needed for their role

All users should have identical permissions

Administrators should have unrestricted access

11. Which security principle ensures that systems remain operational despite attacks or failures?

Confidentiality

Availability

Integrity

Accountability

12. What is the primary function of a Web Application Firewall (WAF)?

Block all internet traffic

Protect against network-layer attacks

Protect against application-layer attacks

Encrypt web traffic

13. Which encryption method uses the same key for both encryption and decryption?

Asymmetric encryption

Symmetric encryption

Hashing

Steganography

14. What does Zero Trust architecture emphasize?

Trust all internal network traffic

Never trust, always verify every access request

Trust users but verify devices

Trust only encrypted connections

15. Which security control type is designed to prevent a threat from occurring?

Detective

Preventive

Corrective

Compensating

16. What is the main purpose of a Security Information and Event Management (SIEM) system?

Prevent all cyber attacks

Collect, analyze, and correlate security events across systems

Replace firewalls

Encrypt all network traffic

17. Which access control model grants permissions based on user roles within an organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

18. In threat modeling, what does STRIDE stand for?

System, Threat, Risk, Impact, Detection, Escalation

Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege

Security, Testing, Response, Implementation, Deployment, Evaluation

Storage, Transfer, Retention, Integration, Distribution, Encryption

19. Which framework provides guidance for information security management systems?

ISO/IEC 27001

NIST Cybersecurity Framework

CIS Controls

All of the above

20. What is the primary goal of defense-in-depth strategy?

Eliminate all security risks

Create multiple layers of security controls

Reduce security costs

Simplify security management

SecurityX Architecture Quiz: Do You Know Secure the Enterprise?