Explain Methodologies Used to Select Security Technologies Aligned to Business Need, Organizational Technology Landscape, and Security Controls. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security architect is selecting a web application firewall (WAF) for a company that runs a mix of legacy on-premises applications and modern cloud-native services. The business requires that the WAF provide consistent protection across both environments, but the team has limited expertise in managing cloud-native security tools. The architect must choose between a cloud-native WAF and a third-party WAF that can be deployed in both environments. Which decision best balances business needs, technology landscape, and team capabilities?

   • ADeploy the cloud-native WAF and train the team on its management, despite the learning curve.
   • BImplement a third-party WAF only for on-premises applications and use a cloud-native WAF for cloud services.
   • CSelect the cloud-native WAF for the cloud services and accept that legacy applications will have less protection.
   • DChoose the third-party WAF that supports both on-premises and cloud deployments, even if it requires more initial configuration.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary goal of an organizational technology landscape assessment?

   • ATo determine the budget for security technology purchases
   • BTo identify the security technologies that are most popular in the industry
   • CTo create a list of all security incidents that have occurred
   • DTo understand the existing environment to ensure new security technologies fit and integrate
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security architect is selecting a new data encryption solution for a financial institution. The business requires that encryption be applied to data at rest and in transit, and that the solution integrate with the existing key management system. Which factor is most important for the selection?

   • AThe solution must be easy for end users to use.
   • BThe solution must provide a dashboard for administrators to monitor encryption status.
   • CThe solution must use the strongest encryption algorithm available.
   • DThe solution must support encryption for both at-rest and in-transit data and integrate with the existing key management system.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of using a scoring matrix in a security technology selection methodology?

   • ATo rank vendors based on the number of security certifications they hold
   • BTo calculate the total cost of ownership for each technology
   • CTo objectively compare technologies against defined business and technical criteria
   • DTo create a list of all security technologies available in the market
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which statement best describes the purpose of a business needs analysis in security technology selection?

   • ATo compare the features of competing security products
   • BTo define the technical specifications of the security product
   • CTo inventory all hardware and software currently in use
   • DTo translate business objectives and constraints into security requirements
   Reveal Solution Discussion Select an answer first