Explain How Security Technologies and Controls Fit into the Organizations Governance, Risk, and Compliance Program and Overall Risk Management. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A financial institution is required by regulation to review its security controls annually. The security team uses a SIEM and a configuration management database (CMDB). Which practice best supports the annual review and continuous improvement?

   • AConduct a manual review of all SIEM rules and CMDB entries once a year.
   • BUse the SIEM to generate reports on control effectiveness, such as alert response times and rule coverage, and review them against the CMDB.
   • CDisable unused SIEM rules to reduce noise and improve performance.
   • DRely on the SIEM vendor's compliance reports to demonstrate control effectiveness.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A university's governance committee has approved a new security policy that requires all remote access to the research network to be protected by multi-factor authentication (MFA). The IT department is deploying a VPN solution. Which action best ensures the VPN deployment aligns with the governance policy?

   • ADeploy the VPN and enable MFA after a trial period to allow users to adapt.
   • BDeploy the VPN without MFA but add a note to the policy that MFA will be added later.
   • CDeploy the VPN with MFA for administrative users only, as researchers are low-risk.
   • DConfigure the VPN to require MFA for all remote users, and document the configuration in the policy implementation plan.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In a governance structure, which role is typically responsible for defining the overall security policies and ensuring that security technology deployments align with business objectives?

   • ASecurity operations center (SOC) analysts
   • BNetwork administrators
   • CEnd users
   • DBoard of directors or executive leadership
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A cloud service provider must comply with SOC 2 Type II and ISO 27001. They are implementing a security information and event management (SIEM) system. Which SIEM capability is most directly required by both frameworks?

   • AAutomated incident response playbooks for all security events.
   • BUser and entity behavior analytics (UEBA) to detect insider threats.
   • CLogging and monitoring of security events, with retention and review procedures.
   • DIntegration with a threat intelligence feed to block known malicious IPs.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which control framework provides a comprehensive set of controls organized into families such as Access Control, Audit and Accountability, and Incident Response?

   • ACOBIT
   • BCIS Controls
   • CNIST SP 800-53
   • DISO 27001
   Reveal Solution Discussion Select an answer first