Explain How Cybersecurity Defense Data Architectures Scale Using Technologies and Capabilities Such as Data Mesh, Data Lakes, Message Bus, Message Routing, and Federated Search. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which message routing method delivers a security alert only to consumers that have subscribed to a specific topic, such as 'malware-detected'?

   • AContent-based routing
   • BBroadcast routing
   • CPoint-to-point routing
   • DTopic-based routing
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a cybersecurity data lake, what is the primary purpose of storing raw, unmodified security data?

   • ATo enforce a strict schema on all incoming logs
   • BTo reduce storage costs by compressing all data immediately
   • CTo eliminate the need for data governance policies
   • DTo preserve original fidelity for future analysis and threat hunting
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which data mesh principle treats security datasets as deliverables with defined consumers, quality standards, and service-level expectations?

   • AFederated computational governance
   • BSelf-serve data platform
   • CDomain-oriented data ownership
   • DData as a product
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm is building a security data lake to store raw network flow logs, endpoint telemetry, and threat intelligence feeds. Analysts need to run ad-hoc queries on raw data, while the detection engineering team needs curated datasets for specific use cases. Which architecture best supports both needs?

   • AApply a fixed schema at ingestion time to all raw data to ensure consistency for both analysts and detection engineers.
   • BStore raw data in the data lake with schema-on-read, and create curated zones or tables for detection engineering use cases.
   • CIngest all data into a message bus and have consumers transform it before storing only the transformed results in the data lake.
   • DUse federated search to query raw data sources directly and avoid storing any data in a central data lake.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security platform is experiencing performance degradation as data volume grows. The current architecture sends all raw logs directly from sources to a single analytics engine. Which combination of technologies would best improve scalability and reduce the load on the analytics engine?

   • AApply a data mesh model where each domain owns its data and provides its own analytics.
   • BIntroduce a message bus for ingestion and a data lake for raw storage, with the analytics engine consuming only curated data.
   • CUse federated search to query raw logs directly from their source systems, bypassing the analytics engine.
   • DIncrease the number of analytics engine instances and load-balance the raw log stream across them.
   Reveal Solution Discussion Select an answer first