A security architect is designing a new architecture for a healthcare organization that must comply with HIPAA. The organization wants to adopt a Zero Trust model but also needs to ensure that legacy systems, which do not support modern authentication, can still function. The architect must balance security with operational continuity. Which approach best addresses this conflict?

Implement Zero Trust for all systems, including legacy, and require modern authentication for every access.

Use the Cyber Kill Chain to identify all attack stages and implement controls only at the delivery stage.

Apply Zero Trust principles to modern systems and use compensating controls, such as network segmentation and monitoring, for legacy systems.

Abandon Zero Trust and rely solely on traditional perimeter defenses.

Which property of the Bell-LaPadula model prevents a subject with a lower security clearance from reading an object with a higher classification?

The Discretionary Security Property

The Simple Security Property (no read up)

The * (star) Property (no write down)

A company is implementing the NIST Cybersecurity Framework (CSF) to improve its security posture. They have completed the Identify and Protect functions and are now focusing on Detect. They want to ensure that they can detect incidents in a timely manner. Which of the following actions best aligns with the Detect function?

Implementing access controls and encryption.

Conducting regular backups and testing restoration.

Implementing continuous monitoring and anomaly detection systems.

Developing an incident response plan.

What is the primary goal of the SABSA framework?

To align security architecture with business objectives and requirements.

To provide a technical standard for network encryption protocols.

To define a set of compliance requirements for financial institutions.

To replace the need for risk management processes.

Certified Cybersecurity Operations Analyst

Domain 2Objective 3

Cybersecurity Architecture CCOA Practice Questions (Page 7)

Part of the Domain 2: Cybersecurity Principles and Risk domain, which accounts for 20% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~19–32 in this domain), expect 5–8 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

14concepts

20%of the exam

Questions 31–35

31expert · hard
A security architect is designing a new architecture for a healthcare organization that must comply with HIPAA. The organization wants to adopt a Zero Trust model but also needs to ensure that legacy systems, which do not support modern authentication, can still function. The architect must balance security with operational continuity. Which approach best addresses this conflict?
Select an answer first
32foundation · easy
Which property of the Bell-LaPadula model prevents a subject with a lower security clearance from reading an object with a higher classification?
Select an answer first
33expert · medium
A company is implementing the NIST Cybersecurity Framework (CSF) to improve its security posture. They have completed the Identify and Protect functions and are now focusing on Detect. They want to ensure that they can detect incidents in a timely manner. Which of the following actions best aligns with the Detect function?
Select an answer first
34foundation · easy
What is the primary goal of the SABSA framework?
Select an answer first
35application · medium
A company is moving to a cloud-based infrastructure and wants to adopt a security model that assumes no implicit trust, even for users inside the corporate network. They want to verify every access request regardless of location. Which model should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Cybersecurity Architecture CCOA Practice Questions (Page 7)

Questions 31–35

Which property of the Bell-LaPadula model prevents a subject with a lower security clearance from reading an object with a higher classification?

What is the primary goal of the SABSA framework?

A company is moving to a cloud-based infrastructure and wants to adopt a security model that assumes no implicit trust, even for users inside the corporate network. They want to verify every access request regardless of location. Which model should they implement?

Keep studying — Domain 2: Cybersecurity Principles and Risk