CCISO Security Architecture 2 — Questions and Answers
Question 1: Which security architecture model uses the concept of 'never trust, always verify' as its foundational principle?
- Defense-in-Depth
- Zero Trust Architecture (Correct answer)
- Jericho Forum Model
- Perimeter Security Model
Correct answer: Zero Trust Architecture
Zero Trust Architecture (ZTA) operates on the principle that no user, device, or network segment is inherently trusted, requiring continuous verification of every access request.
Question 2: A CISO is designing a cloud security architecture. Which framework provides a comprehensive set of security controls specifically tailored for cloud environments?
- NIST SP 800-53
- CSA Cloud Controls Matrix (CCM) (Correct answer)
- ISO 27001 Annex A
- CIS Controls v8
Correct answer: CSA Cloud Controls Matrix (CCM)
The CSA Cloud Controls Matrix (CCM) is specifically designed to provide security control requirements and guidance for cloud computing environments.
Question 3: In a segmented network architecture, what is the PRIMARY purpose of a demilitarized zone (DMZ)?
- To host internal databases away from the internet
- To provide a buffer zone between untrusted external networks and trusted internal networks (Correct answer)
- To isolate workstations from servers
- To store encryption keys securely
Correct answer: To provide a buffer zone between untrusted external networks and trusted internal networks
A DMZ acts as a buffer zone that separates an organization's internal network from untrusted external networks, hosting publicly accessible services while protecting internal resources.
Question 4: Which architectural pattern best supports resilience by ensuring no single component failure can bring down an entire system?
- Monolithic architecture
- Single point of failure elimination through redundancy (Correct answer)
- Flat network design
- Air-gapped network design
Correct answer: Single point of failure elimination through redundancy
Eliminating single points of failure through redundancy ensures that the failure of any individual component does not cause a complete system outage, supporting high availability and resilience.
Question 5: A CISO must choose between a hardware security module (HSM) and a software-based key management solution. What is the MAIN advantage of an HSM?
- Lower cost than software solutions
- Physical tamper resistance and secure key generation within a dedicated hardware boundary (Correct answer)
- Easier integration with cloud services
- Faster key rotation capabilities
Correct answer: Physical tamper resistance and secure key generation within a dedicated hardware boundary
HSMs provide physical tamper resistance and perform cryptographic operations within a secure hardware boundary, preventing private keys from ever being exposed in plaintext outside the device.
Question 6: Which security architecture concept involves distributing security controls across multiple layers so that if one layer fails, subsequent layers continue to provide protection?
- Least privilege
- Defense-in-depth (Correct answer)
- Separation of duties
- Need-to-know
Correct answer: Defense-in-depth
Defense-in-depth is a layered security strategy where multiple overlapping security controls are deployed so that failure of a single control does not compromise the overall security posture.
Question 7: When implementing a Zero Trust Network Access (ZTNA) solution, what replaces the traditional VPN as the primary remote access mechanism?
- SSL/TLS tunnels to the corporate firewall
- Identity-aware proxies that grant per-application access based on continuous verification (Correct answer)
- Site-to-site IPsec tunnels
- Network Access Control (NAC) quarantine VLANs
Correct answer: Identity-aware proxies that grant per-application access based on continuous verification
ZTNA uses identity-aware proxies that verify identity, device posture, and context before granting access to specific applications, rather than providing broad network-level access like VPNs.
CCISO Security Architecture 2
Which security architecture model uses the concept of 'never trust, always verify' as its foundational principle?