A technical security architecture includes which of the following?

• A. All of a firm's countermeasures
• B. How countermeasures are organized
• C. Both A and B
• D. Neither A nor B

Answer: (C)

Technical security architecture is the design that shows both what security controls are in place and how they are arranged and interoperate across the system. It isn’t enough to list all the countermeasures you have, nor is it enough to describe only how you’ve organized them; the architecture captures both aspects together. The full architecture includes the actual controls (firewalls, encryption, access controls, monitoring, etc.) and the way they’re layered, segmented, and coordinated (where enforcement points lie, how data flows, defense-in-depth, policy integration). So, the strongest answer is that the architecture encompasses both the complete set of countermeasures and the manner in which they’re organized.