Free Practice Quiz Question List

7 Practical Security Architecture Online Quiz Questions

Use this free practice quiz with 20 questions to review 7 Practical Security Architecture, test your knowledge, and prepare for your next test or exam.

20 questions

True or false

1 point

True or false: A plain hash, by itself, proves who created the data.

A
True
B
False

Choose one

1 point

A network has a firewall rule that permits all inbound traffic, although only one service needs to be reachable. Which change best follows the material's guidance?

A
Permit all inbound traffic so that future services can connect without rule changes.
B
Allow only the communications required for the network's intended use.
C
Disable all network communication, including approved business services.
D
Allow traffic based only on whether it originates inside the organization.

Fill in the blank

1 point

A new system is configured with unnecessary access and services disabled from the outset. This applies the principle of .

Written response

1 point

What security principle helps prevent one person from having unchecked control over sensitive actions?

Choose one

1 point

An organization wants to reduce the risk that a compromised guest device can reach production servers. Which network design is most appropriate?

A
Place all devices on one network so they can communicate freely.
B
Use encryption alone and leave traffic between network groups unrestricted.
C
Separate guest Wi-Fi, workstations, and production servers, then tightly control traffic between them.
D
Rely on the fact that devices on the internal network are trustworthy.

Choose all

1 point

An organization is designing zero-trust access decisions. Which practices align with that approach? Select all that apply.

A
Verify the user or service making the request.
B
Grant access automatically if the request comes from the internal network.
C
Consider the device and relevant context.
D
Check which resource is requested and reassess access as conditions change.

Fill in the blank

1 point

For every application request, authorization must be enforced on the trusted side.

Written response

1 point

Centralized logs are used to reveal suspicious access. What category of control describes their purpose?

Choose all

1 point

A team is improving its monitoring so security events can support investigation and response. Which practices should it adopt? Select all that apply.

A
Collect relevant records from identity systems, endpoints, applications, network devices, and cloud services.
B
Allow administrators to edit centralized logs without restriction so they can correct mistakes.
C
Synchronize system clocks and protect important logs from unauthorized alteration.
D
Assign someone to review credible alerts and define what to do when one occurs.

True or false

1 point

True or false: A system's hardening settings should account for operational requirements, because overly restrictive settings can disrupt essential services.

A
True
B
False

Written response

1 point

What should developers use instead of inventing custom cryptography?

Choose one

1 point

A system requires a setting that differs from its approved configuration baseline. What is the best way to manage this exception?

A
Allow each administrator to make undocumented changes whenever needed.
B
Document and approve necessary exceptions, then periodically check systems against the baseline.
C
Ignore differences between deployed systems and approved settings.
D
Disable every service, even when it is essential to system operations.

Choose one

1 point

An organization is deciding how to handle several types of business data. Which approach best follows the material's guidance?

A
Collect and retain all available data so it can be useful later.
B
Encrypt data and leave access permissions unrestricted.
C
Classify data by sensitivity and business need, then limit collection, retention, and access accordingly.
D
Use the same handling rules for all data, regardless of sensitivity.

Open ended

1 point

A destructive incident has taken a production service offline. Describe how a backup and recovery plan can help restore availability, and name two measures that make the recovery copies more dependable.

Choose one

1 point

A workstation fleet runs operating systems and applications that are increasingly out of date. Which action best addresses this endpoint security concern?

A
Keep unsupported software in use if it has not caused a visible problem.
B
Keep operating systems and applications supported and patched.
C
Give every user permanent administrative privileges to speed up updates.
D
Disable endpoint protection so it cannot interrupt normal work.

Choose one

1 point

An organization tests backups so authorized users can regain access to important information after a system failure. Which security objective does this most directly support?

A
Confidentiality
B
Availability
C
Integrity
D
Authenticity

True or false

1 point

True or false: In a zero-trust approach, a device on an internal network is automatically safe to access resources.

A
True
B
False

Written response

1 point

A team documents approved account permissions, enabled services, and network ports for a system. What is this documented set of approved settings called?

Choose one

1 point

Which example is primarily a preventive control?

A
A firewall blocks connections that are not permitted by network rules.
B
Centralized logs reveal suspicious access for investigation.
C
A tested backup restores service after destructive activity.
D
An alert prompts staff to investigate an unusual data export.

Choose one

1 point

Which practice best protects cryptographic keys used to safeguard data?

A
Invent a custom cryptographic algorithm so only the service understands its keys.
B
Control who can use the keys, store them securely, and plan for rotation and retirement.
C
Store keys alongside the data they protect so they are easy to retrieve.
D
Give every user access to the keys as long as the data is encrypted.