Designing, Deploying, and Managing Security Controls ACCISO Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A government agency is deploying a new identity and access management (IAM) system. The agency has strict compliance requirements and cannot afford any downtime. The deployment must be completed within a year. Which deployment strategy is most appropriate?

   • AParallel run of the old and new systems for a month before switching over.
   • BPhased deployment, starting with a pilot group, then rolling out by department.
   • CBig-bang deployment over a weekend to minimize the overall project duration.
   • DDeploy the new system only to the IT department first, then to all other departments at once.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A large enterprise has deployed a new endpoint protection platform (EPP) across all endpoints. After a few months, the security team finds that the EPP is consuming significant CPU resources, causing performance issues on user workstations. The CISO wants to maintain the security posture while addressing the performance problem. The team has limited budget for new hardware. What is the best course of action?

   • ATune the EPP policies to reduce the frequency of scans and exclude non-critical processes.
   • BReplace the EPP with a cloud-based endpoint detection and response (EDR) solution that has lower resource usage.
   • CRemove the EPP from user workstations and rely on network-based security controls.
   • DUpgrade all user workstations with more RAM and faster CPUs.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has implemented a new security control that requires all employees to use a VPN when working remotely. After a year, the security team wants to ensure that the VPN solution is still effective and that it meets the needs of the business. What should the team do?

   • ADisable the VPN and allow employees to work without it to improve productivity.
   • BConduct a periodic review of VPN usage, performance, and security incidents to identify areas for improvement.
   • CReplace the VPN with a new solution immediately to improve security.
   • DAssume the VPN is still effective because it has not been changed since deployment.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which principle is best described by layering multiple independent security controls so that if one fails, another still provides protection?

   • ALeast privilege
   • BDefense in depth
   • CFail-safe defaults
   • DSeparation of duties
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A startup is building a new cloud-based application. The security team wants to ensure that even if an attacker compromises the application server, they cannot access the customer database. The team also wants to deploy the application in a way that allows for gradual rollback if issues arise. Which approach best satisfies these requirements?

   • AUse a single firewall to protect both the application and database, and deploy the application to all users immediately.
   • BUse separate network segments for the application and database, and deploy the application using a blue-green deployment strategy.
   • CPlace the application and database in the same subnet to reduce latency, and deploy the application all at once.
   • DGive the application server direct access to the database to improve performance, and use a canary deployment.
   Reveal Solution Discussion Select an answer first