2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization is implementing a new employee wellness program that uses wearable devices to track health data. The data will be stored in a cloud application. The security architect must integrate this initiative while protecting employee privacy. Which control is most important?

   • AAllow employees to opt out of the program to avoid data collection.
   • BUse anonymized data for all wellness program analytics.
   • CStore the data on-premises to avoid cloud security risks.
   • DImplement strong authentication and access controls for the wellness application.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An organization is planning a digital transformation initiative that will migrate many internal applications to a public cloud provider. What is the most important first step for the security architect to take?

   • ADisable all on-premises security controls because the cloud provider will handle all security.
   • BImmediately move all applications to the cloud to take advantage of the provider's built-in security features.
   • CPurchase additional cyber insurance to cover any potential losses from the migration.
   • DAssess the security implications of the cloud migration on the organization's overall security posture.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying a new customer relationship management (CRM) system that uses machine learning to predict customer behavior. The system will process customer data. The security architect must ensure the AI model is not manipulated. Which control is most important?

   • AEncrypt all customer data in the CRM system.
   • BImplement integrity checks on the training data and model.
   • CUse a strong password for the CRM administrator account.
   • DRegularly back up the CRM database.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An organization is planning to use an artificial intelligence (AI) system to automate security incident analysis. What is a primary security consideration when integrating this AI technology?

   • AReplacing all human security analysts with the AI system to reduce costs.
   • BIgnoring the AI system's recommendations because they are generated by a machine.
   • CEnsuring the AI system is trained on accurate and unbiased data to avoid false positives and negatives.
   • DGuaranteeing the AI system will never make a mistake in its analysis.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A company's strategic goal is to expand into new international markets quickly. How should the security architecture align with this goal?

   • ABy implementing security controls that support rapid deployment of services while ensuring compliance with local regulations.
   • BBy using a single security architecture that is identical for all regions, regardless of local requirements.
   • CBy ignoring local regulations to speed up the expansion process.
   • DBy prioritizing security over all business objectives, even if it significantly slows down market expansion.
   Reveal Solution Discussion Select an answer first