Understand How an Organizations Technical Architectures, E.g. Network Design, Enable or Constrain Security Orchestration. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security team is planning to deploy a SOAR platform that must trigger automated responses in multiple network zones. Which network design element most directly determines whether the SOAR platform can reach the systems it needs to act upon?

   • AThe number of users in the security operations center
   • BThe segmentation and firewall rules between zones
   • CThe operating system version of the SOAR server
   • DThe brand of the endpoint detection and response (EDR) product
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which network design pattern is most likely to facilitate secure and reliable communication between a SOAR platform and multiple security tools?

   • APlacing all tools on the same broadcast domain as end users
   • BUsing only public internet connections for all integrations
   • CA dedicated management network with controlled access
   • DEliminating all firewalls between the SOAR platform and tools
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security architect is evaluating whether an organization's current network architecture can support a SOAR platform. The organization uses a flat network with no segmentation, and all devices are in the same VLAN. The SOAR platform will need to integrate with a firewall, an EDR, and a ticketing system, all of which are on the same network. What is the most likely assessment?

   • AThe architecture is fully compatible because the SOAR platform can reach all devices on the flat network.
   • BThe architecture is compatible, but the lack of segmentation may increase the risk of lateral movement if the SOAR platform is compromised.
   • CThe architecture is not compatible because the SOAR platform cannot be placed in a DMZ.
   • DThe architecture is not compatible because the SOAR platform requires a dedicated management network.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A SOAR platform is configured to automatically create a ticket in a ticketing system when a new alert is received. The ticketing system is hosted on-premises and is behind a firewall that only allows traffic from specific IP addresses. The SOAR platform's API calls to the ticketing system are timing out. What is the most likely cause?

   • AThe ticketing system's API is down.
   • BThe SOAR platform is using the wrong API endpoint.
   • CThe firewall is not allowing the SOAR platform's IP address to reach the ticketing system.
   • DThe ticketing system is rate-limiting the SOAR platform.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An orchestration workflow must send an API call to a security appliance that sits behind a proxy. Which network topology feature is most likely to interfere with the SOAR platform's direct API call?

   • AThe SOAR platform's time zone
   • BThe appliance's firmware version
   • CThe proxy's authentication and allowlist rules
   • DThe number of API endpoints on the appliance
   Reveal Solution Discussion Select an answer first