Cybersecurity Architecture CCOA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a defense-in-depth strategy?

   • ATo create multiple layers of security controls so that if one fails, others still provide protection.
   • BTo eliminate the need for security monitoring.
   • CTo rely on a single strong security control to protect all assets.
   • DTo focus only on perimeter defenses.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company's security team is designing a backup strategy for a critical database. They must ensure that data can be restored quickly after a ransomware attack, but they also need to protect the backups from being encrypted by the ransomware. The team has limited budget and must choose between storing backups on the same network or using an offline, air-gapped storage. Which approach best balances availability and integrity?

   • AStore backups on a separate network segment with strict access controls.
   • BUse a cloud backup service with versioning and encryption.
   • CStore backups on an offline, air-gapped storage that is periodically connected for backups.
   • DStore backups on the same network with frequent automated backups.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the TOGAF ADM, which phase is responsible for defining the initial architecture vision and obtaining approval for the architecture project?

   • APhase D: Technology Architecture
   • BPreliminary Phase
   • CPhase A: Architecture Vision
   • DPhase B: Business Architecture
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to improve its cybersecurity posture by implementing a framework that includes functions for identifying risks, protecting assets, detecting incidents, responding to incidents, and recovering from them. Which framework should they adopt?

   • ACyber Kill Chain
   • BTOGAF
   • CNIST Cybersecurity Framework
   • DMITRE ATT&CK
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a Zero Trust architecture, how is access to a resource typically granted?

   • ABased on the user's network location (e.g., inside the corporate network)
   • BBased on a one-time verification of the user's credentials
   • CBased on the user's role in the organization, regardless of other factors
   • DBased on continuous verification of identity, device health, and context for each request
   Reveal Solution Discussion Select an answer first