CoreQ Academy2.3 Given a scenario, integrate appropriate controls in the design of a secure architecture.
Secure architectures shrink the attack surface, make attacks visible, protect data by design and prove controls actually work.
Attack surface management and reduction
- Vulnerability management
- Continuous discovery and remediation.
- Hardening
- Secure baselines and minimal services.
- Defense-in-depth
- Multiple independent layers so one failure is not a breach.
- Legacy components within an architecture
- Isolating and compensating for systems that cannot be secured to current standards.
Detection and threat-hunting enablers
- Centralized logging
- All relevant logs in one place with consistent time.
- Continuous monitoring
- Ongoing visibility rather than periodic checks.
- Alerting
- High-fidelity alerts routed to responders.
- Sensor placement
- Network and host sensors where they see the important traffic and activity.
Information and data security design
- Classification models
- Defined sensitivity levels and handling rules.
- Data labeling
- Applying classification labels to data so tools can enforce handling.
- Tagging strategies
- Consistent resource and data tags for ownership, sensitivity and automation.
Data loss prevention (DLP)
- At rest
- Scanning stores for sensitive data in the wrong place.
- In transit
- Inspecting email, web and network traffic.
- Data discovery
- Finding where sensitive data actually lives.
Infrastructure and effectiveness
- Hybrid infrastructures
- Consistent controls across on-premises and cloud.
- Third-party integrations
- Least-privilege, monitored connections to vendors and SaaS.
- Control effectiveness
- Evidence that controls work as intended.
- Assessments
- Reviews and tests of controls.
- Scanning
- Automated checks of configuration and vulnerabilities.
- Metrics
- Measures such as mean time to detect, patch latency and coverage.
Check your understanding
Loading quiz…
Original CoreQ Academy material, mapped to objective 2.3 of the publicly available CompTIA SecurityX CAS-005 exam objectives (Exam objectives V5, document version 7.0). Not affiliated with or endorsed by CompTIA. Contains no exam questions.