Explain How Security Technologies and Controls Fit into the Organizations Governance, Risk, and Compliance Program and Overall Risk Management. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which compliance requirement is most directly addressed by implementing a data loss prevention (DLP) solution?

   • AAutomating incident response playbooks
   • BProviding real-time threat intelligence to security analysts
   • CEnsuring that sensitive data is not exfiltrated or accessed by unauthorized users
   • DEncrypting data at rest in databases
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security technology is specifically designed to orchestrate and automate response actions across multiple security tools, thereby supporting the organization's risk management objectives?

   • ASIEM (Security Information and Event Management)
   • BFirewall
   • CSOAR (Security Orchestration, Automation, and Response)
   • DEDR (Endpoint Detection and Response)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An organization's risk appetite statement indicates that it is willing to accept a moderate level of risk for its internal business applications but requires strict controls for customer data. How should security controls be selected and implemented?

   • ADefer all control implementation until a risk assessment is completed for every system.
   • BApply the same level of controls to all systems regardless of data sensitivity.
   • CImplement only technical controls, as administrative controls are not relevant to risk appetite.
   • DImplement stronger controls for customer data and baseline controls for internal applications, aligning with the risk appetite.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A financial institution is required by PCI DSS to regularly test security controls. The security team uses a SIEM and a vulnerability scanner. The risk assessment shows that the most critical risk is a web application vulnerability. The team has a limited budget and must balance the need for continuous monitoring with the cost of tools. Which approach best meets the PCI DSS testing requirement and the risk assessment?

   • ARun the vulnerability scanner monthly on all systems, including the web application, and use the SIEM for alerting.
   • BHire an external penetration testing firm to test the web application annually, and use the SIEM for monitoring.
   • CUse the vulnerability scanner to run quarterly scans on the web application, and use the SIEM to monitor for exploitation attempts in between scans.
   • DUse the SIEM to monitor web application logs continuously, and do not run vulnerability scans, as monitoring is sufficient.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A manufacturing company is adopting ISO/IEC 27001 and needs to implement a security monitoring capability. The company has a moderate risk appetite and limited budget. Which control implementation best aligns with ISO 27001's guidance?

   • AOutsource all monitoring to a managed security service provider (MSSP) to avoid internal effort.
   • BImplement only a firewall and antivirus, as ISO 27001 does not require continuous monitoring.
   • CImplement a SIEM that collects logs from critical systems and correlates events to detect anomalies, with defined response procedures.
   • DDeploy a full SIEM with advanced user and entity behavior analytics (UEBA) and threat intelligence feeds.
   Reveal Solution Discussion Select an answer first