Cybersecurity Architecture CCOA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team is performing threat modeling for a web application. They want to identify specific techniques an attacker might use, such as SQL injection or spear phishing, and map them to tactics like initial access and execution. Which framework should they use?

   • ACyber Kill Chain
   • BNIST CSF
   • CSABSA
   • DMITRE ATT&CK
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   The Zachman Framework organizes enterprise architecture by combining which two dimensions?

   • ASix perspectives (who, what, where, when, why, how) and six rows representing different stakeholder views.
   • BThree tiers (presentation, logic, data) and three security zones.
   • CFive layers of security and five phases of risk management.
   • DFour domains (business, data, application, technology) and four maturity levels.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security architect is designing a security architecture for a retail company. The CEO wants the security architecture to directly support business objectives, such as enabling secure online sales while protecting customer data. Which framework should the architect use to align security architecture with business goals?

   • ATOGAF
   • BNIST CSF
   • CSABSA
   • DZachman Framework
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of a technical control used in a defense-in-depth strategy?

   • ASecurity policies and procedures
   • BBackground checks for new hires
   • CIntrusion detection system (IDS)
   • DSecurity awareness training for employees
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is implementing a Zero Trust architecture. They have a mix of on-premises and cloud applications. The security team wants to enforce least privilege and continuous verification, but they also need to ensure that users can access resources without excessive friction. Which approach best balances security and user experience?

   • AImplement adaptive access policies that require MFA only for high-risk access requests.
   • BUse a VPN for all access, but do not implement additional verification.
   • CImplement a perimeter firewall and rely on network segmentation.
   • DRequire multi-factor authentication (MFA) for every access request, regardless of risk.
   Reveal Solution Discussion Select an answer first