Affect Organizational and Company Priorities and Budgets Based on Key Capabilities Required for Security That Are Aligned to Security and Business Goals. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A logistics company must prioritize security investments for the next fiscal year. They have identified three major risks: ransomware affecting delivery schedules, theft of customer data, and insider misuse of tracking systems. The company's top business priority is on-time delivery. Which risk should be addressed first?

   • ARansomware affecting delivery schedules
   • BAll risks equally, since they are all important
   • CInsider misuse of tracking systems
   • DTheft of customer data
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A global e-commerce company is planning its security roadmap. The company's top organizational priority is rapid expansion into new markets. The security architect must select capabilities that support this growth. Which capability should be prioritized?

   • AA fixed-capacity on-premises SIEM to keep costs predictable
   • BA manual threat-hunting process that requires significant analyst time
   • CA compliance reporting tool that only covers the current operating region
   • DA security analytics solution that can scale elastically to handle increased transaction volumes
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security architect must convince the CFO of a manufacturing company to fund a new threat intelligence platform. The CFO is focused on reducing operational downtime and improving supply chain resilience. Which argument is most likely to secure funding?

   • AThe platform will increase the number of threat indicators we can process.
   • BThe platform will require additional training for our security analysts.
   • CThe platform will integrate with our existing SIEM, which is a technical upgrade.
   • DThe platform will provide early warnings about cyber threats targeting suppliers, reducing the risk of supply chain disruptions.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A multinational corporation is evaluating a new security analytics platform. The board is concerned about both cost and the company's reputation. The company's primary business goal is to expand into emerging markets where cybercrime is prevalent. Which approach best aligns the security investment with business goals while managing costs?

   • ABuild a single on-premises analytics platform in the headquarters country to minimize costs
   • BDeploy identical analytics capabilities in every country simultaneously to ensure uniform protection
   • CDeploy a cloud-based analytics platform with a global footprint, starting with regions that have the highest cybercrime risk
   • DDelay any security investment until the company has fully established its presence in all new markets
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A mid-sized financial firm has a limited security budget. They need to improve threat detection but cannot afford a full SIEM deployment. They have existing endpoint detection and a small security team. Which approach best balances security needs with budget constraints?

   • AHire additional security analysts to manually review logs
   • BPurchase a full on-premises SIEM with all modules to ensure complete coverage
   • CImplement a cloud-based SIEM with a pay-as-you-go model, starting with critical data sources
   • DRely solely on existing endpoint detection without additional investment
   Reveal Solution Discussion Select an answer first