A government agency must align its security program with NIST Cybersecurity Framework (CSF). The agency is implementing a SIEM to support the 'Detect' function. Which SIEM capability is most directly aligned with the 'Detect' function?

Vulnerability scanning and remediation tracking.

Reporting to management on security posture.

Automated response to contain detected threats.

Continuous monitoring and alerting on security events across the enterprise.

A manufacturing company is adopting ISO 27001 and has a risk appetite that is 'risk-neutral' — accepting risks that are cost-effective to mitigate. The risk assessment shows that the risk of a supply chain attack is high, but the cost of implementing a full zero-trust architecture is very high. The company is considering a SIEM and a security rating service. Which approach best aligns with the risk-neutral appetite?

Purchase cyber insurance to transfer the risk, and do not implement any monitoring.

Implement a full zero-trust architecture to eliminate the risk of supply chain attacks.

Implement a SIEM to monitor for indicators of compromise and use a security rating service to assess the security posture of suppliers.

Do not implement any additional controls, as the risk is accepted.

Which governance component is most directly responsible for assigning accountability for the operation and maintenance of a specific security technology?

Defined roles and responsibilities

SplunkCertified Cybersecurity Defense Architect

Domain 6Objective 5

Explain How Security Technologies and Controls Fit into the Organizations Governance, Risk, and Compliance Program and Overall Risk Management. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Part of the Governance, Risk, and Compliance domain, which accounts for 10% of the CYBERSECURITY-DEFENSE-ARCHITECT exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

7concepts

10%of the exam

Questions 21–23

21application · medium
A government agency must align its security program with NIST Cybersecurity Framework (CSF). The agency is implementing a SIEM to support the 'Detect' function. Which SIEM capability is most directly aligned with the 'Detect' function?
Select an answer first
22expert · hard
A manufacturing company is adopting ISO 27001 and has a risk appetite that is 'risk-neutral' — accepting risks that are cost-effective to mitigate. The risk assessment shows that the risk of a supply chain attack is high, but the cost of implementing a full zero-trust architecture is very high. The company is considering a SIEM and a security rating service. Which approach best aligns with the risk-neutral appetite?
Select an answer first
23foundation · easy
Which governance component is most directly responsible for assigning accountability for the operation and maintenance of a specific security technology?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSECURITY-DEFENSE-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CYBERSECURITY-DEFENSE-ARCHITECT” is a trademark of its owner, used for identification only.

Explain How Security Technologies and Controls Fit into the Organizations Governance, Risk, and Compliance Program and Overall Risk Management. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–23

A government agency must align its security program with NIST Cybersecurity Framework (CSF). The agency is implementing a SIEM to support the 'Detect' function. Which SIEM capability is most directly aligned with the 'Detect' function?

Which governance component is most directly responsible for assigning accountability for the operation and maintenance of a specific security technology?

Keep studying — Governance, Risk, and Compliance