Security Architecture

Designing secure systems. Four objectives covering architecture models (cloud IaaSInfrastructure as a Service — Cloud: provider manages hardware, you manage OS and up/PaaSPlatform as a Service — Cloud: provider manages through runtime, you manage apps/SaaSSoftware as a Service — Cloud: provider manages everything, you configure, on-prem, hybrid, edge, containers, serverless, ICSIndustrial Control System — Systems managing physical industrial processes/SCADASupervisory Control and Data Acquisition — Industrial control system for remote monitoring), infrastructure hardening (device placement, firewalls, IDSIntrusion Detection System — Monitors and alerts on suspicious activity (passive)/IPSIntrusion Prevention System — Detects and blocks suspicious activity (inline), 802.1X, VPNVirtual Private Network — Encrypted tunnel over public networks, SD-WANSoftware-Defined Wide Area Network — Centrally managed WAN with dynamic routing, SASESecure Access Service Edge — Combines SD-WAN with cloud-delivered security), data protection strategies (classification, encryption at rest/transit/use, tokenization, DLPData Loss Prevention — Prevents unauthorized data exfiltration, rights management, data lifecycle), and resilience/recovery planning (HAHigh Availability — Architecture minimizing downtime, RAIDRedundant Array of Independent Disks — Storage redundancy through multiple disks, backup strategies, recovery sites, RTORecovery Time Objective — Maximum acceptable downtime/RPORecovery Point Objective — Maximum acceptable data loss (in time)).

Objective 3.2 (“Given a scenario, apply security principles to secure enterprise infrastructure”) is the PBQ target — device placement in security zones, firewall rule configuration, 802.1X authentication, IDSIntrusion Detection System — Monitors and alerts on suspicious activity (passive)/IPSIntrusion Prevention System — Detects and blocks suspicious activity (inline) deployment decisions. Understanding how interception works offensively makes your defensive architecture decisions sharper.