Question 1 of 10 · Governance, Risk, and Compliance
What is subprocessor risk?
Subprocessors are your vendor's vendors; their handling of your data is a fourth-party risk.
Question 2 of 10 · Security Architecture
Which component enforces access decisions in a zero trust model?
The PEP enforces decisions made by the PDP based on policy and context.
Question 3 of 10 · Security Engineering
Which post-quantum concern should influence cryptographic engineering decisions now?
Attackers may store encrypted data to decrypt once quantum computing matures, so crypto agility matters.
Question 4 of 10 · Security Operations
What does a SIEM primarily do in security operations?
A SIEM collects logs and events from many sources, normalizes and correlates them, and raises alerts when patterns indicate a threat. Patching is a vulnerability management function. Blocking processes on endpoints is what EDR does, and automating playbooks across tools is SOAR, which often works alongside a SIEM.
Question 5 of 10 · Governance, Risk, and Compliance
What does data classification drive?
Data classification labels information by sensitivity and value, and each label carries handling, access, encryption and disposal requirements, so protection is proportionate to the data. Patch order is driven by vulnerability severity and asset criticality. Storage hardware and bandwidth are capacity and cost decisions, not outcomes of classification.
Question 6 of 10 · Security Architecture
What does an API gateway provide in a secure architecture?
An API gateway is a single entry point in front of backend APIs that enforces authentication and authorization, applies rate limits and quotas, and routes requests to the right service. Filtering outbound user web traffic is the job of a secure web gateway. Encryption at rest is handled by the storage layer, and static code analysis is a development-time testing activity.
Question 7 of 10 · Security Engineering
Which engineering choice improves resilience of authentication services?
Running identity providers redundantly across separate locations removes the single point of failure, so authentication stays available if one site or instance fails. Bigger hardware improves capacity but is still one point of failure. Longer token lifetimes only delay the impact of an outage and widen the window for stolen tokens, and local accounts fragment identity and weaken control.
Question 8 of 10 · Security Operations
What does correlation across data sources in a SIEM enable?
Correlation links related events from different sources, such as a phishing email, a new process on the endpoint and an unusual outbound connection, so the SIEM can detect a multi-stage attack that no single source would flag. Correlation depends on having many log sources, not fewer. Inline blocking is a firewall or IPS function, and tamper-proof storage supports evidence integrity rather than detection.
Question 9 of 10 · Governance, Risk, and Compliance
Which is a key element of third-party risk management?
Ongoing assessment, not just at onboarding, manages third-party risk.
Question 10 of 10 · Security Architecture
What is the benefit of microsegmentation over a flat network?