Explain Methodologies Used to Select Security Technologies Aligned to Business Need, Organizational Technology Landscape, and Security Controls. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A government agency is selecting a new email security gateway. The agency has a strict requirement to prevent data exfiltration and to detect phishing attempts. The existing email system is on-premises, but the agency is planning to migrate to a cloud-based email service in the next year. Which factor should the security architect consider to ensure the email security gateway meets both current and future needs?

   • AThe gateway must be able to quarantine emails that contain sensitive data.
   • BThe gateway must provide detailed reporting for compliance audits.
   • CThe gateway must support both on-premises and cloud email environments to accommodate the planned migration.
   • DThe gateway must have the highest possible spam filtering accuracy.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services firm is implementing a new security information and event management (SIEM) system. The firm's security policy requires preventive, detective, and corrective controls. The SIEM will be used primarily for detective controls. Which additional technology should the firm consider to ensure a balanced set of security controls?

   • AA vulnerability scanner to identify weaknesses, which is a detective control.
   • BA firewall to provide both preventive and detective controls.
   • CA ticketing system to manage incidents, which is a corrective control.
   • DAn intrusion prevention system (IPS) to provide preventive controls.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multinational retail company is expanding into a new region with strict data residency regulations. The security team must select a cloud access security broker (CASB) to enforce data protection policies across SaaS applications. The company's existing infrastructure is predominantly on-premises with a hybrid identity solution. Which approach should the security architect take to ensure the CASB selection aligns with business and regulatory needs?

   • AChoose a CASB with the most advanced data loss prevention features, regardless of integration capabilities.
   • BDeploy a CASB that only supports cloud-based identity providers to simplify management.
   • CSelect a CASB that supports data residency requirements and integrates with the existing hybrid identity infrastructure.
   • DImplement a CASB that focuses solely on data residency, ignoring other security controls.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security architect is leading the selection of a new endpoint detection and response (EDR) solution for a large enterprise. The organization has a mature security operations center (SOC) that relies on a specific SIEM for correlation. The business requires minimal disruption to existing workflows and a solution that can be integrated with the current SIEM. The architect has identified three potential EDR products. Which methodology should the architect use to make the final decision?

   • AAsk the SOC analysts which product they prefer and select that one.
   • BSelect the EDR product with the highest number of features, as more features indicate better coverage.
   • CChoose the EDR product that is most popular in the industry, as it is likely to be the best fit.
   • DConduct a proof of concept with each EDR product, scoring them against predefined criteria that include SIEM integration and SOC workflow compatibility.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is an example of a corrective security control?

   • AA security information and event management (SIEM) system that correlates logs
   • BA security awareness training program
   • CA disaster recovery plan that restores systems after a breach
   • DAn access control list that restricts file permissions
   Reveal Solution Discussion Select an answer first