Describe How to Develop and Implement Patterns, Architecture Blueprints, and Paved Roads to Enable Cybersecurity Defenses to Scale. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services company is expanding its use of cloud services across multiple business units. The security team wants to ensure that every new workload is deployed with a consistent set of security controls—such as network segmentation, encryption, and logging—while still allowing teams to choose their own cloud provider. What should the security team implement?

   • AA security checklist that each team must manually complete before going live.
   • BA set of architecture blueprints that describe the required security components and their relationships, with guidance for adapting them to different cloud providers.
   • CA single cloud provider standard and a mandatory infrastructure-as-code template for all deployments.
   • DA centralized security team that reviews and approves every individual deployment.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security architect is evaluating the organization's current approach to scaling security defenses. The organization has a large number of patterns and blueprints, but they are not widely used because they are difficult to find and understand. The architect wants to improve the effectiveness of these assets. What should the architect do first?

   • ADelete the existing patterns and blueprints and start over with a new set.
   • BMandate that all teams must use the patterns and blueprints.
   • CCreate more detailed patterns and blueprints to provide more guidance.
   • DConduct a survey to understand why teams are not using the existing patterns and blueprints.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security architect is developing a pattern for securing serverless applications. The pattern must be applicable to multiple cloud providers and also be easy for developers to implement. The architect has limited time and resources. What is the most efficient approach to developing this pattern?

   • AStart with a simple pattern that addresses the most common security requirements, then iterate based on feedback from early adopters.
   • BFocus on a single cloud provider to reduce complexity.
   • CWait until a security incident occurs to identify the necessary controls.
   • DCreate a comprehensive pattern that covers every possible security control for serverless applications.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key technique for implementing paved roads to reduce friction for development teams?

   • ARequiring manual security reviews for every single deployment.
   • BProviding automated, self-service security controls that are pre-approved.
   • CCreating a separate security approval process for each team.
   • DDiscouraging teams from using the paved road to encourage innovation.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security architect is reviewing the organization's existing security patterns. The architect finds that many patterns are outdated and no longer reflect current best practices. The architect wants to ensure that patterns remain relevant and useful. What is the most effective way to maintain the pattern catalog?

   • AOnly update patterns when a security incident occurs that highlights a gap.
   • BArchive all existing patterns and create new ones from scratch every year.
   • CEstablish a regular review cycle where patterns are evaluated against current threats and technologies, and updated or retired as needed.
   • DAssign a single person to maintain all patterns without input from other teams.
   Reveal Solution Discussion Select an answer first