2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A logistics company is integrating autonomous vehicles into its delivery fleet. The vehicles rely on real-time data from various sensors and communicate with a central control system. The security architect must address the security implications of this emerging technology. Which risk is most critical to mitigate?

   • AThe cost of implementing encryption on all vehicle communications.
   • BUnauthorized access to the vehicle's control systems.
   • CThe need for regular software updates for the vehicles.
   • DData privacy concerns of the vehicle's passengers.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   When integrating Internet of Things (IoT) devices into an existing network, which security consideration is most important to address?

   • ADisabling all security features on the IoT devices to ensure they function correctly.
   • BConnecting the IoT devices directly to the corporate network for easier management and monitoring.
   • CEnsuring the IoT devices are placed on a separate network segment with strict access controls.
   • DRelying on the IoT vendor's built-in security features without additional configuration.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A financial institution is exploring the use of blockchain for secure transaction processing. The blockchain network will be permissioned and shared with partner organizations. The security architect must integrate this technology while ensuring data confidentiality and integrity. Which design decision is most critical?

   • AUse a public blockchain to ensure transparency and immutability.
   • BImplement the blockchain without additional security controls to reduce complexity.
   • CRely on the blockchain's inherent security to protect all data.
   • DDefine clear access controls and data privacy rules for the blockchain network.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization is adopting a new AI-based threat detection system. The system requires access to network traffic logs and will make automated decisions to block suspicious activity. The security architect must integrate this technology while ensuring the security of the AI system itself. Which control is essential?

   • AGrant the AI system administrative privileges to all network devices to enable immediate blocking.
   • BProvide the AI system with read-only access to logs and require human approval for blocking actions.
   • CGive the AI system access to all data, including sensitive employee records, to improve detection accuracy.
   • DAllow the AI system to directly modify firewall rules without oversight to improve response time.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is implementing a new employee onboarding process that includes automated account provisioning. The security architect must ensure that the process aligns with the organization's security policies. Which control is most important?

   • AImplement role-based access control to grant appropriate permissions.
   • BUse a shared account for all new employees to simplify management.
   • CDisable account reviews to reduce administrative overhead.
   • DGrant all new employees full access to all systems to avoid delays.
   Reveal Solution Discussion Select an answer first