2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is undergoing a merger with another firm. The combined organization will have overlapping IT systems and security architectures. The security architect must align the security architectures to support the new business goals. Which action is most important?

   • AAdopt the security architecture of the larger organization.
   • BMaintain separate security architectures to avoid conflicts.
   • CConduct a comprehensive risk assessment of both organizations' systems.
   • DImmediately migrate all systems to a single platform to simplify management.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization is implementing a zero-trust architecture as part of a security initiative. The initiative requires that all access requests be verified, regardless of location. The security architect must integrate this with existing systems. Which control is most critical to implement?

   • ACreate a VPN for all remote access.
   • BUse a single sign-on solution to simplify access.
   • CImplement multi-factor authentication for all users.
   • DDeploy a next-generation firewall at the network perimeter.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A manufacturing company is deploying IoT sensors on the factory floor to monitor equipment performance. The sensors will transmit data to a central analytics platform. The security architect must integrate these devices securely. Which control is most critical to implement first?

   • ANetwork segmentation to isolate IoT devices from the corporate network.
   • BMulti-factor authentication for the sensor management console.
   • CRegular firmware updates for the sensors.
   • DFull disk encryption on the sensors to protect data at rest.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An organization's initiative to increase remote work flexibility requires employees to access internal applications from home. How should the security architecture be aligned to support this initiative while maintaining security?

   • ABy disabling all security controls on internal applications to make them easier to access remotely.
   • BBy allowing employees to access internal applications directly from the internet without any additional controls.
   • CBy implementing a secure remote access solution such as a VPN or zero-trust network access (ZTNA).
   • DBy requiring all remote employees to use the same password for all applications to simplify access.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services firm is planning a major digital transformation initiative to offer new online services. The initiative requires rapid deployment of new features. The security architect must ensure that security does not hinder the initiative. Which approach best balances security with the organization's goals?

   • ARequire a full security review before every release, which may delay deployments.
   • BDeploy new features without security testing to meet deadlines, then address issues later.
   • CImplement a DevSecOps pipeline that integrates automated security testing into the CI/CD process.
   • DOutsource all security testing to a third party to avoid internal delays.
   Reveal Solution Discussion Select an answer first