SecurityX Secure Enterprise Integration Quiz

1. What does a threat model help security architects accomplish?

Predict future market trends

Identify potential security threats and vulnerabilities

Reduce software development costs

Eliminate the need for testing

2. In enterprise security, what does 'defense in depth' mean?

Using only one strong security control

Implementing multiple layers of security controls

Relying solely on firewalls

Eliminating redundant security measures

3. What is the primary purpose of a data loss prevention (DLP) system?

Monitor employee productivity

Prevent unauthorized data exfiltration

Increase network speed

Replace backup solutions

4. Which phase of the security development lifecycle focuses on identifying design flaws?

Implementation

Threat modeling

Deployment

Maintenance

5. In identity and access management (IAM), what is federated identity?

A single password for all systems

Allowing users to authenticate across multiple independent systems

Requiring different passwords for each application

Eliminating the need for authentication

6. What does a security baseline establish in an enterprise environment?

Minimum security standards for systems and configurations

Maximum network bandwidth limits

Employee vacation schedules

Marketing campaign timelines

7. Which encryption standard is most widely used for protecting data in transit?

DES

TLS/SSL

ROT13

Base64

8. What is the primary benefit of implementing a zero-trust security model?

Reduces IT support costs

Assumes no trust by default; verifies all access requests

Eliminates the need for passwords

Removes all security controls

9. In enterprise architecture, what is the purpose of a demilitarized zone (DMZ)?

Store sensitive company databases

Separate internal networks from untrusted networks

Eliminate the need for firewalls

Increase network bandwidth

10. Which security control is considered preventive rather than detective?

Security logging

Intrusion detection

Firewall rules

Vulnerability scanning

11. Which security framework is most suitable for organizations needing to balance security controls with business operations?

Zero Trust Architecture

Defense in Depth

Air-Gapped Networks

Single Point of Control

12. In incident response, what is the primary goal of the containment phase?

Identify who caused the incident

Stop the incident from spreading further

Restore all systems immediately

Notify all customers

13. Which compliance framework is primarily focused on protecting healthcare data?

PCI DSS

HIPAA

GDPR

SOC 2

14. What does the principle of least privilege (PoLP) require in access control?

Grant all users administrative rights

Users receive only minimum necessary permissions

Eliminate role-based access entirely

Grant permanent access to all systems

15. Which of the following is a critical component of business continuity planning?

Regular security awareness training

Recovery time objectives (RTO) and recovery point objectives (RPO)

Annual penetration testing

Employee background checks

16. In cryptographic key management, what does key rotation accomplish?

Increases encryption speed

Reduces the risk of key compromise

Eliminates the need for backups

Simplifies access controls

17. What is the primary purpose of a security information and event management (SIEM) system?

Store encrypted user passwords

Collect and analyze security logs across the enterprise

Block all incoming network traffic

Replace firewall functionality

18. Which authentication method provides the strongest security for high-value enterprise systems?

Single password

Multi-factor authentication

Username and security question

Biometric scanning alone

19. In enterprise risk management, what does the risk matrix help identify?

Employee performance metrics

Probability and impact of threats

Budget allocation only

Network topology diagrams

20. What is the primary goal of implementing a secure software development lifecycle (SSDLC)?

Reduce development time

Integrate security throughout all development phases

Eliminate all security vulnerabilities

Automate all testing procedures