Explain How Industry Standard Security Frameworks (PCI, HIPAA, OT/IC, Others) Affect Cyber Defense Architecture. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · medium

   Which OT/ICS framework introduces the concept of 'zones' and 'conduits' to segment industrial networks and control the flow of data between different security levels?

   • ANIST SP 800-82
   • BIEC 62443
   • CPCI DSS
   • DHIPAA Security Rule
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A healthcare organization is migrating its electronic health records (EHR) system to a public cloud. The security architect must ensure the architecture meets HIPAA Security Rule requirements. Which combination of controls is most directly aligned with the HIPAA Security Rule's technical safeguards?

   • AEncrypt all data at rest and in transit using AES-256.
   • BImplement access controls, audit controls, integrity controls, and transmission security.
   • CDeploy a VPN for remote access and use multi-factor authentication for all users.
   • DConduct annual risk assessments and train staff on privacy policies.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company is designing its network architecture to comply with PCI DSS. Which control is most directly required to protect cardholder data in transit?

   • AUse strong encryption for all cardholder data transmitted over open, public networks.
   • BImplement network segmentation to isolate the CDE.
   • CDeploy a firewall to filter traffic between the CDE and the internet.
   • DUse multi-factor authentication for all remote access to the CDE.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A healthcare organization that also processes credit card payments is designing a new data center. The security architect must satisfy both HIPAA and PCI DSS. Which architectural approach best addresses the overlapping requirements?

   • ASegment the network into separate zones for PHI and cardholder data, each with its own access controls and logging.
   • BApply the stricter of the two frameworks' controls to all systems.
   • COutsource all data processing to a third-party provider to avoid compliance.
   • DUse a single security zone with unified controls to simplify compliance.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A manufacturing company is designing a security architecture for its industrial control system (ICS) network. The architect is following NIST SP 800-82 guidelines. Which architectural control is most aligned with NIST SP 800-82's recommended security architecture?

   • AApply patches to all ICS devices on a monthly schedule.
   • BUse a single flat network for simplicity and reduced latency.
   • CDeploy antivirus software on all ICS workstations.
   • DImplement a demilitarized zone (DMZ) between the corporate network and the ICS network.
   Reveal Solution Discussion Select an answer first