Explain How Security Technologies and Controls Fit into the Organizations Governance, Risk, and Compliance Program and Overall Risk Management. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A regional bank must demonstrate to its board that security investments directly reduce identified risks. The CISO wants to show how the existing SIEM and SOAR tools support the bank's risk appetite, which is 'moderate' — accepting some risk but not tolerating prolonged undetected intrusions. Which approach best aligns the security technologies with the GRC program?

   • AReplace the SIEM with a next-generation firewall that provides more direct network protection, as it is a more tangible control.
   • BDeploy additional SIEM ingestion to collect all possible data sources to ensure no risk is missed, regardless of the risk appetite.
   • CCreate a monthly report of SIEM alert volumes and SOAR automation rates to show the board that the tools are active.
   • DMap each SIEM correlation rule and SOAR playbook to a specific risk in the risk register and to the control that mitigates it, then report coverage and gaps to the board.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which practice is an example of using security technology to support continuous improvement of a GRC program?

   • AConducting a one-time risk assessment and implementing all recommended controls.
   • BRegularly reviewing SIEM alerts and incident reports to identify trends and adjust security controls.
   • CDisabling logging to reduce data storage costs.
   • DUsing a firewall to block all inbound traffic without exception.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A security architect is explaining to a non-technical stakeholder how a SIEM platform contributes to the organization's compliance objectives. Which statement accurately describes this contribution?

   • AA SIEM platform provides centralized logging and monitoring that can generate evidence and reports to demonstrate compliance with regulatory requirements.
   • BA SIEM platform replaces the need for a governance framework by providing all necessary compliance controls in a single tool.
   • CA SIEM platform automatically enforces all security policies and eliminates the need for manual compliance reviews.
   • DA SIEM platform is primarily used to automate incident response actions, such as blocking malicious IPs, without any role in compliance reporting.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following best describes the role of a risk management framework in the selection of security controls?

   • AIt provides a structured process for identifying, assessing, and responding to risks, which guides control selection.
   • BIt is only applicable to government organizations, not private companies.
   • CIt automatically implements all recommended controls without human intervention.
   • DIt replaces the need for a risk assessment by providing a fixed set of controls for every organization.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does a SIEM platform contribute to continuous monitoring in a GRC program?

   • ABy providing a static report of security posture at a single point in time.
   • BBy replacing the need for periodic risk assessments.
   • CBy continuously collecting and analyzing security events to detect anomalies and potential incidents.
   • DBy automatically remediating all identified vulnerabilities without human intervention.
   Reveal Solution Discussion Select an answer first