3.1 Define Strategy Based on Data Sources, Business Alignment, Organization Strategy, and Best Practice SECURITY-OPERATIONS-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When aligning detection use cases with business priorities, what should be considered?

   • AThe brand of security tools in use
   • BThe organization's risk tolerance
   • CThe number of security analysts on staff
   • DThe location of the data center
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a key input when mapping detection use cases to the organization's security strategy?

   • AThe organization's threat model
   • BThe number of security tools in the environment
   • CThe latest security vendor marketing materials
   • DThe personal preferences of security analysts
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is maintaining human oversight important in automation use cases?

   • ATo handle exceptions and validate automated decisions
   • BTo slow down the automation process
   • CTo eliminate the need for testing
   • DTo increase the number of manual steps
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A manufacturing company's security strategy focuses on protecting intellectual property (IP) and maintaining operational continuity. The threat model identifies nation-state espionage as the primary adversary. The security team is proposing a new detection use case for 'unusual outbound data transfers from the engineering network.' Which additional consideration is most important to ensure this use case aligns with the organization's strategy?

   • AVerifying that the use case is testable with known benign and malicious traffic samples.
   • BMapping the use case to the espionage threat model and the business priority of protecting IP.
   • CEnsuring the use case can be automated to reduce analyst workload.
   • DConfirming the use case also detects insider threats, since they are a common source of IP loss.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common data source that informs detection use cases?

   • AMarketing campaign metrics
   • BCustomer satisfaction surveys
   • CNetwork traffic logs
   • DEmployee performance reviews
   Reveal Solution Discussion Select an answer first