Question 1

What does the principle of 'least privilege' mandate in a security architecture?

Accepted Answer

Users, systems, and processes should be granted only the minimum access rights necessary to perform their designated functions, and nothing more.

Question 2

What is 'defense in depth' as a security architecture strategy?

Accepted Answer

Defense in depth layers multiple security controls so that if one control fails, additional controls continue to protect the asset. No single point of failure exists.

Question 3

What security principle does 'separation of duties' enforce?

Accepted Answer

No single individual should have enough access to complete a sensitive or critical task alone, reducing the risk of fraud or error by requiring multiple people to collude.

Question 4

What is 'secure by default' as a design principle?

Accepted Answer

Systems and software ship with the most secure settings enabled out of the box, requiring administrators to explicitly loosen restrictions rather than tighten them.

Question 5

What is the purpose of 'open design' as a cryptographic and security principle?

Accepted Answer

Security should not depend on the secrecy of the design or algorithm; the system remains secure even when the design is publicly known, relying on secret keys instead.

Security Architecture – CompTIA Security+ Flashcards

Study Modes

Practice Test

Study Guide

Try These Cards

Related Study Decks

CompTIA Security+ Certification — Complete Bundle

CompTIA Security+ Compliance & Governance

CompTIA Security+ Threats & Attacks

Cryptography Basics – CompTIA Security+

Identity & Access Management – CompTIA Security+

Incident Response – CompTIA Security+ Flashcards

Unlock the Full CompTIA Security+ Certification Study Bundle