CERTMASTER CE SECURITY+ DOMAIN 3.0 SECURITY
ARCHITECTURE ASSESSMENT EXPECTED QUESTIONS
WITH VERIFIED ANSWERS
Question 1.
An organization plans to implement a load balancer as part of its network infrastructure to manage the
increased web traffic to its services. The organization tasks a network administrator with ensuring that
the load balancer configures in line with best security practices to reduce the attack surface and secure
the enterprise infrastructure. The network administrator's responsibilities include evaluating the
network appliances, securing connectivity, and considering device placement. What is th
ANSWER
A. Implement a Web Application Firewall alongside the load balancer.
Question 2.
A multinational corporation handles human-readable and non-human-readable data. What are the
implications for security operations and controls?
ANSWER
A. Security measures for non-human-readable data: encryption, access controls, intrusion
detection/prevention, and secure data exchange (incorrect)
B. Security measures for human-readable data: monitoring, user awareness, encryption, and
secure data exchange (incorrect)
Question 3.
The IT manager of a medium-sized organization is designing a new network infrastructure to secure its
enterprise infrastructure by implementing an Intrusion Prevention System (IPS) and an Intrusion
Detection System (IDS). The manager is considering different deployment methods for the IPS/IDS to
optimize their effectiveness. The organization's network includes multiple security zones, a virtual
private network (VPN) for remote access, and a web application firewall (WAF). Which deployment
method
ANSWER
C. Deploy the IPS/IDS devices in inline mode at the network perimeter.
,Question 4.
An IT specialist working for a multinational confectionery company needs to fortify its network security.
The firm has been dealing with intrusions where raw User Datagram Protocol (UDP) packets bypass
open ports due to a virus. The specialist will analyze packet data to verify that the application protocol
corresponds to the port. The company also wants to track the state of sessions and prevent fraudulent
session initiations. Which of the following tools should the IT specialist prioritize deploying?
ANSWER
D. Deep packet inspection firewall
Question 5.
A manufacturing firm is exploring the implementation of an isolated network system for its plant floor
operations. The goal is to prevent any unauthorized or accidental communication with other networks.
The firm plans to manage large-scale, real-time processes using this system. Which type of
infrastructure will BEST fit the firm's needs?
ANSWER
D. ICS/SCADA infrastructure
Question 6.
A medium-sized organization elects to redesign its network security infrastructure. The IT manager is
considering implementing a proxy server to enhance security and improve client performance. The
organization's network includes a virtual private network (VPN) for remote access, multiple security
zones, and a Unified Threat Management (UTM) system. Which of the following is the primary benefit
of implementing a proxy server in this scenario?
ANSWER
B. The proxy server can perform application-layer filtering, enhancing network traffic security.
Question 7.
A global e-commerce company faces challenges with its legacy monolithic application. The application
is becoming increasingly difficult to maintain due to its intertwined components and struggles to scale
quickly enough to handle sudden traffic surges during big sales events. The company has already
invested in cloud technology and on-premises infrastructure but still faces scalability and
manageability issues. What would MOST effectively address these challenges?
ANSWER
A. Microservices
, Question 8.
A large multinational corporation is restructuring its IT division. The corporation defines roles,
responsibilities, and levels of authority for different tasks across various teams. What type of tool is the
corporation likely to use to document this information?
ANSWER
B. Responsibility matrix
Question 9.
The IT department of a healthcare provider maintains a database containing personal health
information for its patients. Which classification BEST suits this type of data?
ANSWER
D. Regulated
Question 10.
A corporation is experiencing frequent power failures in its data center, which are causing downtime
and resulting in high recovery costs. Which strategy could the corporation employ to minimize the
impact of these power failures?
ANSWER
D. Implement a UPS system
Question 11.
An organization wants to improve the security of sensitive customer information stored on its servers.
This sensitive customer information is "data at rest" and not currently accessed or processed. Which
method should the organization consider for protecting this data?
ANSWER
C. Encryption
Question 12.
During an annual review, a health services company's leadership aims to scrutinize its disaster
response and data recovery protocols. They focus on effectiveness, hidden weaknesses, and clarity of
employee roles during a disaster. Which course of action would BEST serve these objectives?
ANSWER
C. Organizing tabletop exercises
ARCHITECTURE ASSESSMENT EXPECTED QUESTIONS
WITH VERIFIED ANSWERS
Question 1.
An organization plans to implement a load balancer as part of its network infrastructure to manage the
increased web traffic to its services. The organization tasks a network administrator with ensuring that
the load balancer configures in line with best security practices to reduce the attack surface and secure
the enterprise infrastructure. The network administrator's responsibilities include evaluating the
network appliances, securing connectivity, and considering device placement. What is th
ANSWER
A. Implement a Web Application Firewall alongside the load balancer.
Question 2.
A multinational corporation handles human-readable and non-human-readable data. What are the
implications for security operations and controls?
ANSWER
A. Security measures for non-human-readable data: encryption, access controls, intrusion
detection/prevention, and secure data exchange (incorrect)
B. Security measures for human-readable data: monitoring, user awareness, encryption, and
secure data exchange (incorrect)
Question 3.
The IT manager of a medium-sized organization is designing a new network infrastructure to secure its
enterprise infrastructure by implementing an Intrusion Prevention System (IPS) and an Intrusion
Detection System (IDS). The manager is considering different deployment methods for the IPS/IDS to
optimize their effectiveness. The organization's network includes multiple security zones, a virtual
private network (VPN) for remote access, and a web application firewall (WAF). Which deployment
method
ANSWER
C. Deploy the IPS/IDS devices in inline mode at the network perimeter.
,Question 4.
An IT specialist working for a multinational confectionery company needs to fortify its network security.
The firm has been dealing with intrusions where raw User Datagram Protocol (UDP) packets bypass
open ports due to a virus. The specialist will analyze packet data to verify that the application protocol
corresponds to the port. The company also wants to track the state of sessions and prevent fraudulent
session initiations. Which of the following tools should the IT specialist prioritize deploying?
ANSWER
D. Deep packet inspection firewall
Question 5.
A manufacturing firm is exploring the implementation of an isolated network system for its plant floor
operations. The goal is to prevent any unauthorized or accidental communication with other networks.
The firm plans to manage large-scale, real-time processes using this system. Which type of
infrastructure will BEST fit the firm's needs?
ANSWER
D. ICS/SCADA infrastructure
Question 6.
A medium-sized organization elects to redesign its network security infrastructure. The IT manager is
considering implementing a proxy server to enhance security and improve client performance. The
organization's network includes a virtual private network (VPN) for remote access, multiple security
zones, and a Unified Threat Management (UTM) system. Which of the following is the primary benefit
of implementing a proxy server in this scenario?
ANSWER
B. The proxy server can perform application-layer filtering, enhancing network traffic security.
Question 7.
A global e-commerce company faces challenges with its legacy monolithic application. The application
is becoming increasingly difficult to maintain due to its intertwined components and struggles to scale
quickly enough to handle sudden traffic surges during big sales events. The company has already
invested in cloud technology and on-premises infrastructure but still faces scalability and
manageability issues. What would MOST effectively address these challenges?
ANSWER
A. Microservices
, Question 8.
A large multinational corporation is restructuring its IT division. The corporation defines roles,
responsibilities, and levels of authority for different tasks across various teams. What type of tool is the
corporation likely to use to document this information?
ANSWER
B. Responsibility matrix
Question 9.
The IT department of a healthcare provider maintains a database containing personal health
information for its patients. Which classification BEST suits this type of data?
ANSWER
D. Regulated
Question 10.
A corporation is experiencing frequent power failures in its data center, which are causing downtime
and resulting in high recovery costs. Which strategy could the corporation employ to minimize the
impact of these power failures?
ANSWER
D. Implement a UPS system
Question 11.
An organization wants to improve the security of sensitive customer information stored on its servers.
This sensitive customer information is "data at rest" and not currently accessed or processed. Which
method should the organization consider for protecting this data?
ANSWER
C. Encryption
Question 12.
During an annual review, a health services company's leadership aims to scrutinize its disaster
response and data recovery protocols. They focus on effectiveness, hidden weaknesses, and clarity of
employee roles during a disaster. Which course of action would BEST serve these objectives?
ANSWER
C. Organizing tabletop exercises
