How should I use these Security Architecture Modeling practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Security Architecture Modeling questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Security Architecture Modeling domain.

ISC · topic practice

Security Architecture Modeling practice questions

Practise (ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP, Aug 2025 blueprint) (ISC) Security Architecture Modeling practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Security Architecture Modeling

Practice 10 questions Browse domain →

What the exam tests

What to know about Security Architecture Modeling

Security Architecture Modeling questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Security Architecture Modeling exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Security Architecture Modeling questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Security Architecture Modeling explanation →

Which architecture pattern is specifically designed to isolate sensitive processes from the rest of the network?

Trap 1: Load Balancing

This is for availability, not isolation.

Trap 2: VPN

This is for secure transport, not network isolation.

Trap 3: Microsegmentation

Microsegmentation isolates workloads at the host level, but DMZ is the broader structural pattern.

Study all Security Architecture Modeling common traps →

A
DMZ
A DMZ is a classic architecture pattern for isolating public-facing systems.
B
Load Balancing
Why wrong: This is for availability, not isolation.
C
VPN
Why wrong: This is for secure transport, not network isolation.
D
Microsegmentation
Why wrong: Microsegmentation isolates workloads at the host level, but DMZ is the broader structural pattern.

Security Architecture Modeling practice questions

What to know about Security Architecture Modeling

Common Security Architecture Modeling exam traps

Security Architecture Modeling questions

Which architecture pattern is specifically designed to isolate sensitive processes from the rest of the network?

When documenting security architecture, which component of the ISO/IEC 27001 standard is most closely aligned with the 'Statement of Applicability'?

You are designing a reference architecture for a cloud environment. Which NIST document provides the most relevant framework for cloud security architecture?

In a SABSA (Sherwood Applied Business Security Architecture) model, you are mapping business attributes to security services. Which layer focuses on the 'What' from a business perspective?

In the context of Enterprise Security Architecture, what is the primary goal of the 'Capability Maturity Model' (CMM) integration?

You are implementing threat modeling using the PASTA (Process for Attack Simulation and Threat Analysis) framework. What is the primary output of Stage 2?

When conducting threat modeling using the STRIDE methodology, which category addresses a user gaining unauthorized access to an administrative account?

You are utilizing TOGAF 10 to develop an Architecture Content Framework. Which component of the Architecture Development Method (ADM) phase A is specifically required to define the scope and identify stakeholders?

In the context of TOGAF, what is the 'Architecture Repository' used for?

Which document is the primary deliverable of the TOGAF 'Architecture Definition Document'?

What is the primary function of a Security Reference Architecture (SRA)?

When performing an architectural review of a CI/CD pipeline, which security control is most critical for preventing unauthorized deployment of code?

Which tool would you use to visualize the data flow between components in a cloud-native application for threat modeling?

When evaluating a software-defined perimeter (SDP), which architecture principle is being primarily enforced?

Which threat modeling technique is best described as focusing on the attacker's perspective and their motivation?

When designing a secure API architecture, which pattern is the industry standard for securing inter-service communication?

Which type of diagram is used to represent the different zones in an architecture?

In the context of the SABSA framework, what is the relationship between the 'Security Services' and 'Business Attributes'?

Which threat modeling tool is known for generating DFDs and identifying threats via a rule engine?

When designing an architecture, which principle states that a system should be designed to be secure even if other security measures fail?

Track your progress over time

Start a Security Architecture Modeling only practice session

Related ISC topic practice pages

Infrastructure And System Security practice questions

Security Architecture Modeling practice questions

Governance Risk And Compliance practice questions

Identity And Access Management Architecture practice questions

ISC fundamentals practice questions

ISC scenario practice questions

ISC troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid