Describe How to Develop and Implement Patterns, Architecture Blueprints, and Paved Roads to Enable Cybersecurity Defenses to Scale. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security architect is developing a new architecture blueprint for a multi-region disaster recovery environment. The blueprint must satisfy both a regulatory requirement for data residency and the business need for low-latency failover. The architect has gathered input from legal, compliance, and operations teams. What is the most important consideration when finalizing the blueprint?

   • AEnsure the blueprint explicitly defines which security controls are mandatory and which can be adapted based on regional requirements.
   • BEnsure the blueprint includes a detailed cost analysis for every possible deployment scenario.
   • CEnsure the blueprint specifies a single cloud provider and region to simplify management.
   • DEnsure the blueprint is approved by the legal team before any technical review.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is implementing a paved road for secure data storage. The paved road includes encryption, access controls, and audit logging. However, the team is concerned that the paved road might be too restrictive for some use cases, such as data that needs to be shared externally. What should the security team do to address this concern?

   • ARequire all teams to use the paved road without any exceptions.
   • BDesign the paved road with configurable options for different data classifications, while maintaining mandatory security controls.
   • CRemove the paved road and let teams implement their own security controls.
   • DMake the paved road optional for teams that have special requirements.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security architect is explaining to management how patterns, blueprints, and paved roads help the organization scale its security defenses. Which statement best describes their collective value?

   • AThey enable consistent security controls to be deployed quickly and with less effort, allowing the security team to focus on new threats rather than repetitive tasks.
   • BThey guarantee that no security incidents will occur if followed correctly.
   • CThey are only useful for large enterprises with many development teams.
   • DThey eliminate the need for a dedicated security team because security is fully automated.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security team has implemented a paved road for secure CI/CD pipelines. However, a high-performing team has requested an exception to use a different tool that they claim is more efficient. The security team wants to maintain consistency while not stifling innovation. What should the security team do?

   • ADeny the request to maintain consistency across all teams.
   • BEvaluate the request, and if the alternative tool meets the same security requirements, allow the exception and document it as a potential enhancement to the paved road.
   • CRequire the team to use the paved road for six months before considering an exception.
   • DAllow the exception without review to keep the team happy.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary goal of establishing paved roads for security controls?

   • ATo slow down the deployment of new security tools to ensure thorough review.
   • BTo accelerate adoption and ensure consistency by providing a supported, low-friction path.
   • CTo create a single, rigid path that all teams must follow without exception.
   • DTo replace the need for security architects in the organization.
   Reveal Solution Discussion Select an answer first