Affect Organizational and Company Priorities and Budgets Based on Key Capabilities Required for Security That Are Aligned to Security and Business Goals. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A retail chain wants to improve its security posture but the CEO is skeptical about the return on investment. The company's main business goal is to increase customer loyalty through a seamless shopping experience. Which security capability should the architect present as directly supporting this goal?

   • AFraud detection on payment transactions to reduce chargebacks and protect customer trust
   • BComprehensive audit logging for all internal systems
   • CRegular penetration testing of the corporate website
   • DAdvanced threat intelligence feeds for the security operations center
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A university has a limited security budget and must improve its security posture. They have identified three needs: phishing protection for students and staff, DLP for research data, and improved incident response. The university's leadership values academic freedom and research collaboration. Which investment should be prioritized?

   • AImproved incident response, because it helps recover from any attack
   • BDLP for research data, because research is the university's core mission
   • CAll three equally, because they are all important
   • DPhishing protection, because it addresses the most common attack vector and has a broad impact
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A startup has a small security budget and needs to implement basic threat detection. They have no dedicated security team. Which approach best balances cost and effectiveness?

   • AUse a managed security service provider (MSSP) to monitor a cloud-based SIEM
   • BRely on free antivirus software only
   • CBuild an in-house SIEM from open-source components
   • DPurchase a high-end enterprise SIEM with all features
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A large hospital system must prioritize security investments. They have identified three critical risks: ransomware disrupting patient care, unauthorized access to electronic health records (EHR), and insider threats from employees accessing sensitive data. The hospital's budget is limited, and they must choose one initiative to fund this year. Which initiative should they choose to best balance risk and business impact?

   • AImplementing advanced endpoint detection and response (EDR) on all clinical workstations
   • BSplitting the budget equally among all three initiatives
   • CImplementing user behavior analytics (UBA) to detect insider threats
   • DDeploying a comprehensive data loss prevention (DLP) solution for all EHR access
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A financial services company is expanding into a new country with strict data localization laws. They have a limited budget and need to deploy a security analytics platform. The company also wants to maintain a centralized security operations team. Which approach best meets both the regulatory and operational requirements?

   • ADeploy an on-premises platform in the new country, managed by a local team
   • BDeploy a cloud-based platform in the new country's region, with centralized monitoring from the home office
   • CDelay the expansion until the data localization law is changed
   • DUse the existing platform in the home country and ignore the data localization law
   Reveal Solution Discussion Select an answer first