Describe How to Develop and Implement Patterns, Architecture Blueprints, and Paved Roads to Enable Cybersecurity Defenses to Scale. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security architect is developing a pattern for securing APIs. The architect has identified common requirements such as authentication, rate limiting, and input validation. What should the architect include in the pattern to make it most useful for multiple teams?

   • AA description of the problem, the required controls, and guidance on how to implement them in different technology stacks.
   • BA specific code example for one programming language and framework.
   • CA list of security tools that teams must purchase and use.
   • DA compliance checklist that teams must complete before deploying their APIs.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A security architect wants to ensure that a newly acquired subsidiary can quickly adopt the same security monitoring capabilities as the parent organization. Which characteristic of reusable security patterns makes this possible?

   • AThey are only applicable to cloud-native environments and cannot be used in on-premises data centers.
   • BThey are codified, repeatable approaches that can be applied consistently across different teams and environments.
   • CThey are written as one-off solutions tailored to a specific team's unique infrastructure.
   • DThey are documented only after a security incident has occurred, to prevent the same attack from recurring.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the collective outcome of using patterns, blueprints, and paved roads in a security program?

   • AA more efficient, consistent, and scalable approach to implementing security defenses.
   • BA reduction in the consistency of security implementations across teams.
   • CIncreased time-to-deployment for new security controls.
   • DA requirement for each team to hire its own security architect.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A software company wants to accelerate the adoption of secure coding practices among its developers. The security team has identified that developers often avoid security tools because they are difficult to set up and integrate. The team wants to provide a pre-configured, supported path that developers can use without needing to make security decisions themselves. What should the team implement?

   • AA mandatory security training program that all developers must complete before they can commit code.
   • BA paved road that includes a pre-configured CI/CD pipeline with integrated security scanning, automated dependency checks, and a self-service portal for developers.
   • CA set of security guidelines and best practices documented in a wiki.
   • DA security review board that evaluates each code change before it is merged.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has implemented a paved road for deploying containerized applications with built-in security scanning. However, adoption is low because developers find the paved road too restrictive and prefer to use their own scripts. What should the security team do to improve adoption?

   • AIncrease the security scanning frequency to make the paved road more valuable.
   • BRemove the paved road and let teams manage their own security.
   • CGather feedback from developers to understand their pain points, then adjust the paved road to be more flexible while maintaining security requirements.
   • DEnforce the paved road by blocking any deployment that does not use it.
   Reveal Solution Discussion Select an answer first