3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security operations center (SOC) needs to detect anomalous behavior on endpoints, such as a process making unusual network connections or a file being modified unexpectedly. The SOC wants a tool that can provide real-time visibility and alerting on these activities. Which solution should the security architect recommend?

   • AConfigure a host-based intrusion prevention system (HIPS) to block known malicious signatures.
   • BDeploy an endpoint detection and response (EDR) solution on all endpoints.
   • CUse a security information and event management (SIEM) system to collect logs from the endpoints.
   • DImplement a network-based intrusion detection system (NIDS) at the network perimeter.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization is migrating its on-premises email system to a cloud-based unified communications (UC) platform that includes email, instant messaging, and voice. The security architect must ensure that sensitive data is not inadvertently shared externally via email or instant messaging. Which control should be prioritized?

   • ADeploy a web application firewall (WAF) in front of the UC platform.
   • BImplement a data loss prevention (DLP) policy that scans email and instant messages for sensitive content and blocks or quarantines violations.
   • CEnable encryption for all communications between the client and the UC platform.
   • DConfigure the UC platform to require multi-factor authentication (MFA) for all users.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a common security risk associated with Voice over IP (VoIP) systems?

   • AEavesdropping on unencrypted voice traffic
   • BVoIP systems are immune to denial-of-service attacks
   • CVoIP systems do not require authentication
   • DVoIP systems cannot be integrated with other services
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which storage technology provides block-level access to storage over a dedicated high-speed network, often used in enterprise data centers?

   • AArchival tape storage
   • BDirect-attached storage (DAS)
   • CNetwork-attached storage (NAS)
   • DStorage area network (SAN)
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare organization stores patient records on a network-attached storage (NAS) device. The security architect is implementing controls to prevent unauthorized access to the data and to detect if sensitive data is being copied to removable media. Which combination of controls should be implemented?

   • ADeploy a host-based intrusion detection system (HIDS) on the NAS and configure it to alert on new USB devices.
   • BEnable file-level encryption on the NAS and configure a data loss prevention (DLP) agent on endpoints to monitor and block copies to USB drives.
   • CUse a storage area network (SAN) instead of NAS and rely on its built-in snapshot features.
   • DImplement role-based access control (RBAC) on the NAS and enable audit logging for all file access.
   Reveal Solution Discussion Select an answer first