CySA+ Test CySA+ Test Security Architecture and Tools 1 — Questions and Answers
Question 1: Which security architecture principle ensures that users and systems are granted only the minimum permissions necessary to perform their functions?
- Defense in depth
- Least privilege (Correct answer)
- Zero trust
- Separation of duties
Correct answer: Least privilege
The principle of least privilege limits access rights to only what is strictly required, reducing the attack surface if an account is compromised.
Question 2: A CySA+ analyst is evaluating a network where every access request is verified regardless of whether the user is inside or outside the network perimeter. Which model is this?
- Defense in depth
- Perimeter security
- Zero trust (Correct answer)
- DMZ model
Correct answer: Zero trust
Zero trust operates on the principle of 'never trust, always verify,' requiring continuous authentication and authorization for every access request.
Question 3: Which security tool provides real-time analysis of security alerts generated by network hardware and applications?
- IDS
- Firewall
- SIEM (Correct answer)
- Proxy server
Correct answer: SIEM
A SIEM (Security Information and Event Management) system aggregates and analyzes log data from multiple sources to detect threats in real time.
Question 4: Which architecture concept involves placing publicly accessible servers in a network segment separated from the internal network?
- Zero trust
- DMZ (Demilitarized Zone) (Correct answer)
- VPN tunneling
- Network segmentation via VLAN only
Correct answer: DMZ (Demilitarized Zone)
A DMZ is a perimeter network that exposes external-facing services while shielding the internal network from direct external access.
Question 5: Which tool is used to inspect and filter traffic at the application layer, providing deeper visibility than a traditional packet filter firewall?
- Intrusion Detection System
- Next-Generation Firewall (NGFW) (Correct answer)
- Network tap
- Proxy ARP
Correct answer: Next-Generation Firewall (NGFW)
An NGFW performs deep packet inspection at the application layer, identifying and controlling applications regardless of port or protocol.
Question 6: Which security design principle recommends using multiple overlapping security controls so that the failure of one does not compromise the entire system?
- Least privilege
- Separation of duties
- Defense in depth (Correct answer)
- Fail open
Correct answer: Defense in depth
Defense in depth layers multiple security controls so that if one layer fails, additional layers continue to protect assets.
CySA+ Test CySA+ Test Security Architecture and Tools 1
Which security architecture principle ensures that users and systems are granted only the minimum permissions necessary to perform their functions?