Software Security Architecture

Correct Answer: Implementing mutual TLS authentication

The best answer to secure communication channels against man-in-the-middle (MITM) attacks is 'Implementing mutual TLS authentication.' Mutual TLS (Transport Layer Security) authentication ensures that both the client and the server authenticate each other, which helps to prevent MITM attacks by establishing a secure connection where both parties are verified. This is important in secure software architecture as it prevents an attacker from intercepting or manipulating the communication between a client and a server. 'Utilizing a common shared secret for channel encryption' is less secure compared to mutual TLS, as shared secrets can be compromised, especially if not managed securely. 'Applying symmetric encryption with dynamic key exchange' can be part of a secure strategy, but by itself, it does not ensure the identity of the parties, which is crucial for preventing MITM attacks. 'Enforcing strict access control on all communication endpoints' is good practice but does not address the specific problem of securing the communication channel itself from interception or manipulation.

Correct Answer: Threat modeling

Threat modeling helps assess risks and prioritize security measures, making it the most effective choice. Adding firewalls and hiding server information have limited impact, disabling antivirus and using default passwords can create more vulnerabilities, and ignoring threat intelligence would be counterproductive.

Correct Answer: Three-tier architecture

Three-tier architecture divides the application into Presentation, Business, and Data tiers, allowing for clear separation of authentication and logic. Other architectures do not provide the same level of separation and can lead to potential security risks and maintenance issues.