Explain How Industry Standard Security Frameworks (PCI, HIPAA, OT/IC, Others) Affect Cyber Defense Architecture. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · medium

   Which architectural control is most directly mapped to the HIPAA Security Rule's technical safeguard of 'access control'?

   • AAudit logging of access to ePHI
   • BPhysical locks on server room doors
   • CEncryption of data in transit
   • DRole-based access control (RBAC) and unique user identification
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   Which OT/ICS framework is specifically designed to provide guidance on securing industrial control systems, including supervisory control and data acquisition (SCADA) systems, and is published by NIST?

   • AISO 27001
   • BIEC 62443
   • CNIST Cybersecurity Framework
   • DNIST SP 800-82
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   Which architectural approach can help resolve a potential conflict between OT/ICS framework requirements (like IEC 62443) and traditional IT frameworks (like PCI DSS) when both apply to a converged network?

   • ADisable all OT network connections to avoid any compliance issues.
   • BUse a single firewall rule set for both OT and IT networks.
   • CImplement network segmentation with zones and conduits to isolate OT systems from the cardholder data environment.
   • DApply the same security controls to both OT and IT systems without differentiation.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A manufacturing plant is implementing a security architecture for its OT network. The architect must follow IEC 62443 while also ensuring that the production line is not disrupted. Which architectural control is most appropriate?

   • ADeploy an intrusion prevention system (IPS) inline on the OT network.
   • BEnable automatic patch management on all OT devices.
   • CImplement a DMZ between the corporate network and the OT network with strict access controls.
   • DUse a single flat network to reduce complexity and improve performance.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital is implementing a new patient portal that will transmit protected health information (PHI) over the internet. The security architect must ensure the architecture meets HIPAA requirements for transmission security. Which architectural decision is most appropriate?

   • AUse a VPN tunnel for all internet traffic from the portal.
   • BEncrypt all PHI in transit using TLS 1.2 or higher.
   • CLog all access to the portal and review logs monthly.
   • DRestrict access to the portal to the hospital's internal network.
   Reveal Solution Discussion Select an answer first