Identify Organizational Coverage for Prevention, Detection, Response and Recovery Capabilities. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A manufacturing company's business continuity plan relies on restoring its enterprise resource planning (ERP) system from backups. During a disaster recovery test, the team found that the ERP backups were incomplete because the backup job had been failing silently for several weeks. Which action would most directly improve recovery coverage?

   • AImplement automated backup monitoring and alerting to ensure backup jobs complete successfully.
   • BMove the ERP system to a cloud-based SaaS solution.
   • CEnable encryption on the ERP backups.
   • DIncrease the frequency of ERP backups to every six hours.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of gap analysis in security coverage?

   • ATo ensure all security tools are from the same vendor
   • BTo replace all existing security controls with new technologies
   • CTo measure the performance of individual security analysts
   • DTo identify missing or insufficient controls across prevention, detection, response, and recovery
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A global e-commerce company has a mature security program with strong prevention (WAF, EDR, network segmentation) and detection (SIEM, SOAR). However, a recent audit found that the company's incident response plan does not include a procedure for handling a compromise of its third-party payment processor, which is a critical dependency. Which action would best address this response coverage gap?

   • AIncrease the frequency of backups for payment transaction data.
   • BImplement a web application firewall (WAF) for the payment portal.
   • CDeploy additional endpoint detection and response (EDR) tools on payment systems.
   • DDevelop a third-party incident response playbook that defines coordination with the payment processor, communication protocols, and fallback procedures.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A retail company's backup strategy includes nightly full backups of its point-of-sale (POS) systems to a local backup server. During a disaster recovery test, the team discovered that the backup server itself was corrupted and the restoration failed. The company wants to ensure that POS data can be recovered even if the primary backup location is compromised. Which action would most directly improve recovery coverage?

   • AIncrease the frequency of backups to every six hours.
   • BImplement off-site or cloud-based backups with versioning and periodic restore testing.
   • CPurchase a second backup server and place it in the same server room.
   • DEnable encryption on the existing backup server.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which mechanism is most directly used for detection coverage of network-based threats?

   • ANetwork intrusion detection system (NIDS) that inspects traffic for known attack signatures
   • BIncident response team that contains a compromised host
   • CFirewall rules that block inbound traffic from untrusted IP addresses
   • DBackup strategy that replicates data to an offsite location
   Reveal Solution Discussion Select an answer first