2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A multinational corporation is adopting a multi-cloud strategy to avoid vendor lock-in and improve resilience. The security architect must integrate this initiative while maintaining consistent security controls across all cloud providers. Which approach is most effective?

   • AUse each cloud provider's native security tools independently to maximize capabilities.
   • BChoose a single cloud provider for all workloads to simplify security.
   • CImplement a cloud-agnostic security framework using open standards and centralized identity management.
   • DOutsource security management to a third-party provider for all clouds.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A company decides to adopt a bring-your-own-device (BYOD) policy to increase employee productivity. How should the security architect adjust the security architecture to address this initiative?

   • ARequire employees to sign a liability waiver and provide no additional technical controls.
   • BIncrease the network bandwidth to handle the additional device traffic.
   • CImplement mobile device management (MDM) and containerization to separate corporate data from personal data on employee devices.
   • DBan all personal devices from accessing corporate resources to eliminate the risk entirely.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A government agency is modernizing its legacy systems to improve citizen services. The initiative includes moving some services to the cloud and adopting agile development. The security architect must ensure that security architecture supports this transformation. Which approach is most effective?

   • ADevelop a security architecture that is flexible and can adapt to changing requirements.
   • BMaintain the existing security architecture to avoid disruption.
   • CFocus only on cloud security and ignore legacy system risks.
   • DImplement a rigid security framework to ensure consistency.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A security architect is integrating a new web application into the corporate network. Which approach best demonstrates the principle of defense in depth?

   • AUsing strong encryption for all data in transit and at rest, but no other security controls.
   • BPlacing a firewall at the network perimeter and relying solely on it to block all malicious traffic.
   • CImplementing a web application firewall, network segmentation, and host-based intrusion detection to protect the application.
   • DConducting a single vulnerability scan before deployment and addressing all identified issues.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When integrating a new customer relationship management (CRM) system into the enterprise architecture, which action best exemplifies the principle of least privilege?

   • AProviding the same access level to all employees to simplify administration and avoid configuration errors.
   • BGranting temporary full access to all users during the initial rollout to facilitate a smooth transition.
   • CAssigning each user the minimum level of access required to perform their specific job functions within the CRM.
   • DGranting all sales staff full administrative rights to the CRM to ensure they can perform any task without delay.
   Reveal Solution Discussion Select an answer first