42 questions · Security Architecture Modeling topic · All types, answers revealed
When designing an architecture, which principle states that a system should be designed to be secure even if other security measures fail?
This involves layering security controls.
Why this answer
Defense in depth ensures that if one layer fails, others remain to protect the system.
When documenting a cloud-based architecture, which aspect is most critical to document for compliance?
This defines the division of security tasks between parties.
Why this answer
Shared Responsibility Model documentation is essential to define which security controls the provider manages vs. the customer.
You are implementing threat modeling using the PASTA (Process for Attack Simulation and Threat Analysis) framework. What is the primary output of Stage 2?
Stage 2 involves identifying the architecture and technical scope.
Why this answer
Stage 2 of PASTA is defining the technical scope, which identifies assets, trust boundaries, and data flows.
In a SABSA (Sherwood Applied Business Security Architecture) model, you are mapping business attributes to security services. Which layer focuses on the 'What' from a business perspective?
The Contextual layer defines the business scope and 'What' the business needs.
Why this answer
SABSA uses a matrix where the Contextual layer (Layer 1) defines the 'What' (Business requirements).
Which THREE principles are core to a 'Zero Trust' architecture? (Select THREE)
Core Zero Trust pillar.
Why this answer
Zero Trust relies on explicit verification, least privilege, and assuming breach.
When designing a secure API architecture, which pattern is the industry standard for securing inter-service communication?
mTLS provides robust cryptographic identity for services.
Why this answer
mTLS (mutual TLS) ensures that both parties in a connection verify each other's identity.
When conducting threat modeling using the STRIDE methodology, which category addresses a user gaining unauthorized access to an administrative account?
Elevation of privilege is the correct category for unauthorized access escalation.
Why this answer
Elevation of Privilege (E) occurs when a user gains access rights they should not possess.
What is the primary function of a Security Reference Architecture (SRA)?
An SRA provides reusable designs and standards.
Why this answer
SRA provides a proven, standardized model for security design that ensures consistency across an enterprise.
What is the primary function of a Security Content Automation Protocol (SCAP) in architecture?
SCAP is a framework for automated vulnerability and configuration checking.
Why this answer
SCAP provides a standardized way to automate security vulnerability management and configuration assessment.
In the context of Enterprise Security Architecture, what is the primary goal of the 'Capability Maturity Model' (CMM) integration?
CMM is used to measure and improve the maturity of security processes.
Why this answer
CMM allows an organization to measure the effectiveness and repeatability of its security architecture processes.
Which tool would you use to visualize the data flow between components in a cloud-native application for threat modeling?
DFDs illustrate data movement and boundaries for threat analysis.
Why this answer
Data Flow Diagrams (DFD) are the standard for visualizing how data moves through a system.
Which TWO elements are required to effectively document a security architecture for audit purposes? (Select TWO)
Visual documentation is mandatory for audit.
Why this answer
Auditors require the design itself (diagrams) and the security controls implemented to protect the assets.
Which document is the primary deliverable of the TOGAF 'Architecture Definition Document'?
The ADD serves as the comprehensive record of the architecture.
Why this answer
The ADD is the main container for all architectural descriptions and documentation.
When designing a secure cloud architecture, which TWO security services are essential for identity and access management? (Select TWO)
Standard for managing permissions.
Why this answer
IAM requires robust policy enforcement and federation for secure access.
When using the 'Trike' methodology for threat modeling, which of the following is the main focus?
Trike aims to balance risk between stakeholder assets and security requirements.
Why this answer
Trike focuses on ensuring the risk management process is balanced between security, reliability, and functionality.
In the context of the CISSP-ISSAP, which architecture framework is most commonly used for federal government IT systems?
FEAF is the specific framework for federal enterprise architecture.
Why this answer
FEAF (Federal Enterprise Architecture Framework) is the standard for US federal government agencies.
Which THREE components are typically included in an Enterprise Security Architecture (ESA) framework? (Select THREE)
Reference models provide reusable components.
Why this answer
ESA frameworks require governance, a design methodology, and a component reference library.
Which THREE of the following are considered 'Assets' in security architecture? (Select THREE)
A critical data asset.
Why this answer
Assets include data, hardware, software, and intellectual property.
Which type of diagram is used to represent the different zones in an architecture?
This clearly shows zones of differing security requirements.
Why this answer
A trust boundary diagram or network architecture diagram is used to illustrate security zones.
Which THREE elements are essential to define a trust boundary? (Select THREE)
Transitioning between privilege levels requires a boundary.
Why this answer
A trust boundary is defined by the transition between levels of access, authentication, or network zones.
Which THREE items should be included in a thorough Architecture Decision Record (ADR)? (Select THREE)
Tracks if the decision is proposed or accepted.
Why this answer
ADRs need to document the decision, the context, and the consequences of the decision.
You are designing a reference architecture for a cloud environment. Which NIST document provides the most relevant framework for cloud security architecture?
This specifically addresses cloud security architecture and guidelines.
Why this answer
NIST SP 800-144 is the standard reference for cloud computing security and architecture guidelines.
Which security principle is enforced when you restrict an application's ability to modify system files?
Restricting access to only necessary files is least privilege.
Why this answer
Least privilege ensures that the application has only the permissions required for its function, preventing system-wide modifications.
In the context of the SABSA framework, what is the relationship between the 'Security Services' and 'Business Attributes'?
SABSA maps business requirements (attributes) to security services.
Why this answer
The business attributes (what the business needs) drive the requirement for specific security services.
When designing for 'Availability' in a distributed architecture, which pattern is used to handle service failure gracefully?
This pattern prevents cascading failures in distributed systems.
Why this answer
The Circuit Breaker pattern prevents an application from repeatedly trying to execute an operation that is likely to fail.
Which threat modeling technique is best described as focusing on the attacker's perspective and their motivation?
This focuses on the threat actors and their goals.
Why this answer
Attacker-centric threat modeling starts with the adversary and their specific objectives.
Which TWO are common challenges in Enterprise Security Architecture? (Select TWO)
Silos prevent consistent security architecture implementation.
Why this answer
Managing organizational silos and maintaining alignment with changing business needs are top challenges.
What is the primary purpose of an 'Architecture Trade-off Analysis Method' (ATAM)?
ATAM assesses the impact of architectural choices on system quality attributes.
Why this answer
ATAM is used to evaluate architectural decisions and their impact on quality attributes like security, performance, and availability.
Which TWO types of documentation are standard in the SABSA methodology? (Select TWO)
Used to map business requirements.
Why this answer
SABSA requires business requirements documentation and security service specifications.
When evaluating a software-defined perimeter (SDP), which architecture principle is being primarily enforced?
SDP is a physical implementation of Zero Trust architecture.
Why this answer
SDP enforces 'Zero Trust' by requiring authentication and authorization before the network connection is made.
Which component is the most critical to protect in a web-based architecture?
The database is the ultimate repository of sensitive information.
Why this answer
The database is typically the primary target for attackers as it contains the sensitive data.
When evaluating architectural threats, which THREE categories are explicitly defined in the STRIDE methodology? (Select THREE)
Part of the STRIDE acronym.
Why this answer
STRIDE stands for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
In the context of TOGAF, what is the 'Architecture Repository' used for?
The repository stores reusable standards and models.
Why this answer
The repository acts as a central library for all architectural work products, models, and design patterns.
In the TOGAF ADM, which TWO phases are most critical for security architecture integration? (Select TWO)
Security solutions are evaluated here.
Why this answer
Phase A (Vision) and Phase E (Opportunities and Solutions) are where security requirements are integrated and evaluated.
In the context of the 'Zachman Framework', which cell represents the 'Why' of the security architecture?
The motivation column addresses the business drivers and goals.
Why this answer
The 'Why' column in the Zachman Framework is the 'Motivation' column, which focuses on business goals and security drivers.
Which THREE factors influence the choice of a security architecture framework? (Select THREE)
The framework must match the organization's ability to implement it.
Why this answer
Regulatory requirements, organizational size, and business goals are key drivers for selecting a framework.
When modeling threats for a microservices architecture, which TWO threats are most relevant due to service distribution? (Select TWO)
Lack of mutual authentication between services is a major risk.
Why this answer
Distributed architectures face significant risks related to lateral movement and insecure inter-service communication.
Which component of an architecture document defines the communication standards between services?
This defines the contracts and communication protocols.
Why this answer
The Interface Specification or API design document defines how services communicate.
You are utilizing TOGAF 10 to develop an Architecture Content Framework. Which component of the Architecture Development Method (ADM) phase A is specifically required to define the scope and identify stakeholders?
The Architecture Vision phase is where the scope is defined and stakeholders are identified.
Why this answer
The Preliminary Phase and Phase A are critical for scoping, but the Architecture Vision phase specifically mandates stakeholder identification and scope definition.
When performing an architectural review of a CI/CD pipeline, which security control is most critical for preventing unauthorized deployment of code?
This enforces separation of duties and oversight for code changes.
Why this answer
Separation of duties via multi-party approval in the pipeline prevents a single compromised account from pushing code to production.
Which TWO of the following are primary goals of conducting threat modeling during the architecture phase? (Select TWO)
This is the primary goal of architecture threat modeling.
Why this answer
Threat modeling identifies design flaws and helps prioritize security investments.
Which threat modeling tool is known for generating DFDs and identifying threats via a rule engine?
This tool automates DFD creation and STRIDE threat generation.
Why this answer
Microsoft Threat Modeling Tool is the standard software tool for DFD-based threat analysis.
Ready to test yourself?
Try a timed practice session using only Security Architecture Modeling questions.