2.04 Explain the Justification for a Proposed Solution 401 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which three components are typically included in a technical justification for a proposed security solution?

   • AHardware specifications, software licenses, and vendor support contracts
   • BMarketing strategy, brand identity, and customer feedback
   • CBusiness requirements, technical constraints, and risk factors
   • DProject timeline, team roles, and communication plan
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A multinational company must justify a new security solution to protect intellectual property. The company operates in multiple countries with varying data protection laws. The solution must be implemented within six months. The security architect must present a justification to the board. Which approach best balances the need for speed and compliance?

   • APropose a single global solution that meets the most stringent data protection law, ensuring compliance everywhere.
   • BPropose a phased rollout, starting with regions that have the most stringent data protection laws, and present the justification as a risk mitigation strategy.
   • CPropose a solution that is localized to each region, but this will require more time and resources.
   • DPropose to defer the implementation until all legal requirements are fully understood.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a cost-benefit analysis for a security solution, which of the following is considered an ongoing expense?

   • AInitial hardware purchase
   • BMigration setup cost
   • CAnnual maintenance fees
   • DOne-time implementation fee
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When mapping a security solution to organizational goals, which of the following is a compliance mandate that might drive the solution?

   • APCI DSS
   • BTOGAF
   • CITIL
   • DCOBIT
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security architect must present a justification for a new endpoint detection and response (EDR) solution to the IT operations team. The team is concerned about the performance impact on end-user devices. How should the architect frame the justification?

   • AState that the EDR solution is a critical security tool and that performance impact is a necessary trade-off.
   • BProvide a detailed technical explanation of how the EDR solution uses kernel-level monitoring to detect threats.
   • CEmphasize that the EDR solution will reduce the number of security incidents, which will save time in the long run.
   • DExplain that the EDR solution has a low performance footprint and can be tuned to minimize impact on user productivity.
   Reveal Solution Discussion Select an answer first