SplunkCertified Cybersecurity Defense Architect
Domain 4Objective 1
Understand How an Organizations Technical Architectures, E.g. Network Design, Enable or Constrain Security Orchestration. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 1)
Part of the Advanced Automation and Orchestration domain, which accounts for 10% of the CYBERSECURITY-DEFENSE-ARCHITECT exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)
15questions here
3free pages
5concepts
10%of the exam
Questions 1–5
- 1
A SOAR platform must send HTTPS requests to several security APIs. Which network design element is most likely to enable these integrations to work efficiently?
Select an answer first - 2
A company is planning to deploy a SOAR platform that needs to integrate with multiple security tools across different network zones. The security architect wants to ensure high availability and avoid a single point of failure for the SOAR platform's API connections. Which network design pattern best supports this requirement?
Select an answer first - 3
A SOAR platform is integrated with a cloud-based sandbox for malware analysis. The sandbox is accessed via a public API, but the organization's network uses a proxy for all outbound internet traffic. The SOAR platform's API calls to the sandbox are failing with a 502 Bad Gateway error. What is the most likely cause?
Select an answer first - 4
A company is deploying a SOAR platform that needs to integrate with a cloud-based SIEM and an on-premises firewall. The cloud SIEM is accessed via a public API, and the on-premises firewall is managed via a private API. What network design element is essential to enable the SOAR platform to reach both?
Select an answer first - 5
Which architectural characteristic would most likely prevent a SOAR platform from being deployed successfully?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CYBERSECURITY-DEFENSE-ARCHITECT” is a trademark of its owner, used for identification only.