A healthcare organization is designing a backup and disaster recovery architecture. The security architect must ensure the architecture meets HIPAA requirements for data integrity and availability. Which control is most directly aligned with the HIPAA Security Rule?

Encrypt all backup data at rest.

Implement a data backup process and test restoration procedures regularly.

Deploy a SIEM to monitor backup logs.

Use a redundant internet connection for the data center.

A company is designing its logging architecture to meet PCI DSS requirements. Which logging practice is most directly required by PCI DSS?

Use a SIEM to correlate logs from all network devices.

Store logs for at least one year for troubleshooting purposes.

Log all access to cardholder data and monitor logs for suspicious activity.

A healthcare organization is implementing a new EHR system and must comply with the HIPAA Security Rule. The architect is designing access controls. Which control is most directly aligned with the HIPAA technical safeguard of access control?

Implement single sign-on across all applications.

Require multi-factor authentication for all remote access.

Assign a unique user ID to each person who accesses the system.

Use role-based access control for all users.

Which PCI DSS requirement is most directly satisfied by implementing network segmentation to isolate the cardholder data environment (CDE) from the rest of the corporate network?

Requirement 2: Do not use vendor-supplied defaults for system passwords.

Requirement 1: Install and maintain network security controls.

Requirement 11: Regularly test security systems and processes.

Requirement 6: Develop and maintain secure systems and applications.

SplunkCertified Cybersecurity Defense Architect

Domain 6Objective 3

Explain How Industry Standard Security Frameworks (PCI, HIPAA, OT/IC, Others) Affect Cyber Defense Architecture. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Part of the Governance, Risk, and Compliance domain, which accounts for 10% of the CYBERSECURITY-DEFENSE-ARCHITECT exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

10%of the exam

Questions 16–20

16application · medium
A healthcare organization is designing a backup and disaster recovery architecture. The security architect must ensure the architecture meets HIPAA requirements for data integrity and availability. Which control is most directly aligned with the HIPAA Security Rule?
Select an answer first
17foundation · medium
Which HIPAA Security Rule safeguard category includes the requirement to implement a security awareness and training program for workforce members?
Select an answer first
18application · medium
A company is designing its logging architecture to meet PCI DSS requirements. Which logging practice is most directly required by PCI DSS?
Select an answer first
19application · medium
A healthcare organization is implementing a new EHR system and must comply with the HIPAA Security Rule. The architect is designing access controls. Which control is most directly aligned with the HIPAA technical safeguard of access control?
Select an answer first
20foundation · medium
Which PCI DSS requirement is most directly satisfied by implementing network segmentation to isolate the cardholder data environment (CDE) from the rest of the corporate network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-DEFENSE-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CYBERSECURITY-DEFENSE-ARCHITECT” is a trademark of its owner, used for identification only.