Domain 318% of scored content
Security Architecture
How the shape of a system changes its security: cloud and on-premises models, secure network design, protecting data in each state, and building for resilience and recovery.
4 topics
About 10 minutes of reading
- 3.1Architecture modelsCloud, on-premises, hybrid, serverless, microservices, IoT, and industrial control systems each move risk around. This objective asks what you gain and what you take on with each model, including the shared responsibility model, infrastructure as code, and considerations like availability, cost, and patching.3 min read
- 3.2Securing enterprise infrastructureThis scenario objective covers where to place devices, how to group them into security zones, how failure modes affect safety, and which network appliances, secure communication, and access methods fit a given need.3 min read
- 3.3Protecting dataData protection starts with knowing what data you have and how sensitive it is. This objective covers data types and classifications, the three data states, data sovereignty, and the methods used to protect data: encryption, hashing, masking, tokenization, obfuscation, segmentation, and permission restrictions.2 min read
- 3.4Resilience and recoverySystems fail; good architecture plans for it. This objective covers high availability, site considerations, platform diversity, multi-cloud, continuity of operations, capacity planning, testing, backups, and power.2 min read