Enterprise Security Architecture Frameworks Quiz

Submit

2. Which architectural decision reduces attack surface by limiting exposed services?

Network segmentation and micro-segmentation

Expanding system access

Removing all firewalls

Consolidating all services

3. True or False: Enterprise security architecture should be flexible to adapt to emerging threats.

True

False

Submit

5. What role does threat intelligence play in security architecture?

Informs design decisions and risk prioritization

Replaces vulnerability assessments

Eliminates the need for controls

Only applies to incident response

6. Which model describes security as concentric rings of protection?

Zero-trust architecture

Defense-in-depth

Flat security model

Perimeter-only model

Submit

8. True or False: Security architecture is independent of business objectives.

True

False

9. Which security principle limits user access to only necessary resources?

Defense-in-depth

Least privilege

Zero-trust

Encryption-first

10. In zero-trust models, trust is granted based on which factor?

User location

Continuous verification and authentication

Network IP address

Employee tenure

11. What is the primary goal of defense-in-depth architecture?

Eliminate all security threats

Create multiple layers of security controls

Replace firewalls with advanced detection

Automate all incident response

12. Which framework provides guidance on information security governance?

ISO 27001

NIST Cybersecurity Framework

Both ISO 27001 and NIST CSF

PCI DSS only

13. True or False: Risk assessment is a one-time activity in security architecture.

True

False

14. What is the primary benefit of implementing security by design?

Reduces development timeline

Integrates security throughout architecture

Eliminates compliance requirements

Removes the need for testing

15. Which architectural pattern separates critical systems from general networks?

Flat network topology

Network segmentation

Cloud-only deployment

Single authentication gateway

16. True or False: A single perimeter firewall is sufficient for modern enterprise security architecture.

True

False

17. What does the CIA triad stand for in security architecture?

Confidentiality, Integrity, Availability

Compliance, Investigation, Auditing

Cryptography, Identification, Authentication

Control, Implementation, Assessment

18. Which component is essential in a security architecture reference model?

Marketing budget allocation

Identity and access management controls

Hardware vendor selection

Network bandwidth optimization

19. In threat modeling, what does STRIDE represent?

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Security, Testing, Risk, Implementation, Design, Evaluation

Scanning, Tracking, Routing, Intrusion, Detection, Encryption

Standards, Threats, Remediation, Infrastructure, Detection, Enforcement

20. Which framework emphasizes continuous verification regardless of location?

DMZ architecture

Zero-trust architecture

Perimeter security

Air-gapped networks

SecurityX Enterprise Security Architecture Frameworks Quiz

1. What is a security architecture ____ that documents how security is integrated into systems?

2.

What first name or nickname would you like us to use?

2. Which architectural decision reduces attack surface by limiting exposed services?

3. True or False: Enterprise security architecture should be flexible to adapt to emerging threats.

4. In security architecture, ____ refers to the ability to detect and respond to security events.

5. What role does threat intelligence play in security architecture?

6. Which model describes security as concentric rings of protection?

7. A ____ is a high-level plan showing how security controls align with organizational goals.

8. True or False: Security architecture is independent of business objectives.

9. Which security principle limits user access to only necessary resources?

10. In zero-trust models, trust is granted based on which factor?

11. What is the primary goal of defense-in-depth architecture?

12. Which framework provides guidance on information security governance?

13. True or False: Risk assessment is a one-time activity in security architecture.

14. What is the primary benefit of implementing security by design?

15. Which architectural pattern separates critical systems from general networks?

16. True or False: A single perimeter firewall is sufficient for modern enterprise security architecture.

17. What does the CIA triad stand for in security architecture?

18. Which component is essential in a security architecture reference model?

19. In threat modeling, what does STRIDE represent?

20. Which framework emphasizes continuous verification regardless of location?