2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A healthcare organization is migrating its patient-facing portal to a public cloud provider. The portal will handle PHI and must comply with HIPAA. The security architect must integrate this initiative while maintaining a robust security posture. Which approach best aligns with the organization's goals?

   • AImplement a shared responsibility model, configuring identity and access management, encryption, and logging in the cloud while ensuring the provider meets compliance certifications.
   • BMove the portal to the cloud and rely on the provider's default security settings, as the provider is responsible for all security.
   • CUse a private cloud exclusively, as it provides dedicated hardware that guarantees compliance with HIPAA.
   • DKeep the portal on-premises to avoid any cloud security risks, as public cloud cannot meet healthcare compliance requirements.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization is integrating a new API gateway to expose services to third-party developers. The security architect must ensure that the API is secure. Which control is most important to implement?

   • AAllow all API requests to simplify integration for developers.
   • BDisable logging to reduce overhead.
   • CUse a shared API key for all developers.
   • DImplement rate limiting and authentication for API requests.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A university is implementing a new research collaboration platform that allows external partners to access certain systems. The security architect must ensure that the platform aligns with the university's security policies. Which action is most important?

   • AUse a separate network for the platform without any monitoring.
   • BProvide external partners with the same access as internal staff.
   • CDefine and enforce access control policies for external partners.
   • DDisable all security controls to facilitate collaboration.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is moving its on-premises data center to a colocation facility to reduce costs. The security architect must integrate this initiative while maintaining security. Which factor is most important to consider?

   • AThe distance of the facility from the company's headquarters.
   • BThe cost of the colocation contract.
   • CThe brand of the servers being placed in the facility.
   • DThe physical security controls of the colocation facility.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A healthcare provider is adopting a new remote patient monitoring system that uses IoT devices to transmit vital signs to a central system. The security architect must integrate this technology securely. Which control is most important?

   • AUse a simple password for device authentication to ease deployment.
   • BDisable encryption to reduce latency in data transmission.
   • CEncrypt all data transmitted between the devices and the central system.
   • DStore all data on the devices to avoid cloud transmission.
   Reveal Solution Discussion Select an answer first