CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 2 — Questions and Answers
Question 1: Which security architecture model divides an enterprise network into zones with increasing levels of trust and access control?
- Flat network model
- Zero-trust architecture with micro-segmentation (Correct answer)
- Peer-to-peer architecture
- Monolithic architecture
Correct answer: Zero-trust architecture with micro-segmentation
Zero-trust architecture with micro-segmentation divides networks into isolated zones, requiring verification for every access request regardless of location.
Question 2: What is the relationship between enterprise architecture and Business Continuity Planning (BCP)?
- They are completely separate disciplines with no overlap
- EA provides the architectural foundation (redundancy, failover, recovery) that BCP relies on to meet RTO and RPO targets (Correct answer)
- BCP replaces the need for EA risk assessment
- EA only addresses technology risks, not business continuity
Correct answer: EA provides the architectural foundation (redundancy, failover, recovery) that BCP relies on to meet RTO and RPO targets
EA defines the technical redundancy and failover patterns that Business Continuity Plans depend on to achieve recovery time and point objectives.
Question 3: Which of the following is a key output of a security architecture review in the EA process?
- Project Gantt chart
- Security risk assessment with identified gaps and recommended controls (Correct answer)
- Marketing campaign plan
- HR onboarding checklist
Correct answer: Security risk assessment with identified gaps and recommended controls
A security architecture review produces a risk assessment identifying gaps between the current security posture and the required controls.
Question 4: An enterprise architect is asked to evaluate a proposed SaaS vendor. Which security concern is MOST critical to assess?
- The vendor's office location
- Data residency, access controls, encryption standards, and compliance certifications (e.g., SOC 2, ISO 27001) (Correct answer)
- The vendor's marketing materials
- The number of employees at the vendor
Correct answer: Data residency, access controls, encryption standards, and compliance certifications (e.g., SOC 2, ISO 27001)
For SaaS evaluation, data residency, encryption, access controls, and compliance certifications directly determine whether the vendor meets enterprise security requirements.
Question 5: What does 'non-repudiation' mean in the context of enterprise security architecture?
- Ensuring data is encrypted at rest
- Providing proof that a specific party performed a specific action, preventing denial of that action (Correct answer)
- Allowing users to reset their own passwords
- Blocking unauthorized network access
Correct answer: Providing proof that a specific party performed a specific action, preventing denial of that action
Non-repudiation ensures there is irrefutable evidence that a specific party performed an action, such as through digital signatures or audit logs.
Question 6: Which risk treatment option involves transferring risk to a third party, such as through insurance or outsourcing?
- Risk avoidance
- Risk mitigation
- Risk transfer (Correct answer)
- Risk acceptance
Correct answer: Risk transfer
Risk transfer shifts the financial or operational impact of a risk to a third party, commonly through insurance policies or managed service agreements.
CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 2
Which security architecture model divides an enterprise network into zones with increasing levels of trust and access control?