Security+ Domain 2: Architecture and Design Part 1

What is configuration management?

• Managing default usernames and passwords

• A process for maintaining computer systems, servers, and software in a desired, consistent state

• The removal of secure configurations done by a malicious actor

• None of the above

Answer explanation

Configuration management is the process of maintaining computer systems, servers, and software in a desired, consistent state.

A ________ is an agreed upon description of product attributes at some point in time, serving as a basis for measuring change.

Which baseline refers to the state of work products after approved requirements?

• Allocated baseline

• Developmental baseline

• Functional baseline

• Product baseline

Answer explanation

The correct choice is Allocated baseline because it refers to the state of work products after approved requirements are allocated to configuration items.

Which baseline refers to the establishment of initial specifications?

• Allocated baseline

• Developmental baseline

• Functional baseline

• Product baseline

Answer explanation

The functional baseline refers to the establishment of initial specifications for the system's functions and capabilities.

Which of the following is NOT part of the list of naming conventions for attributes?

• Warranty expiration date

• RFC Numbers

• Status

• Case Numbers

Answer explanation

The correct choice is 'Case Numbers' as it is NOT part of the list of naming conventions for attributes.

Which of the following is a hardware security module responsible for?

• Onboard secure cryptographic key generation

• Onboard secure cryptographic key storage

• Key management

• All of the above

Answer explanation

The hardware security module is responsible for onboard secure cryptographic key generation, storage, and key management, making 'All of the above' the correct choice.

Natural disasters are a form of an incident.

• True

• False

Answer explanation

Natural disasters are indeed a form of an incident, making the statement true.

What does CASB stand for?

• Creative Architecture Standards Broker

• Cloud Access Security Broker

• Cipher and Security Broker

• Clear Archive Standards Broker

Answer explanation

CASB stands for Cloud Access Security Broker, which is a security software tool or service that sits between cloud service users and cloud applications to enforce security policies.

CASB is NOT designed to extend across which of the following?

• IaaS

• SaaS

• RaaS

• PaaS

Answer explanation

CASB is not designed to extend across RaaS (Recovery as a Service). It typically covers IaaS, SaaS, and PaaS.

_______ are used to allow an organization to respond to an issue.

• Recall controls

• Recovery controls

• Response controls

• Reaction controls

Answer explanation

Response controls are used to allow an organization to respond to an issue, making it the correct choice in this context.