CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 2

Question 1

Which security architecture model divides an enterprise network into zones with increasing levels of trust and access control?

Accepted Answer

Zero-trust architecture with micro-segmentation

Answer

Flat network model

Answer

Peer-to-peer architecture

Answer

Monolithic architecture

Question 2

What is the relationship between enterprise architecture and Business Continuity Planning (BCP)?

Accepted Answer

EA provides the architectural foundation (redundancy, failover, recovery) that BCP relies on to meet RTO and RPO targets

Answer

They are completely separate disciplines with no overlap

Answer

BCP replaces the need for EA risk assessment

Answer

EA only addresses technology risks, not business continuity

Question 3

Which of the following is a key output of a security architecture review in the EA process?

Accepted Answer

Security risk assessment with identified gaps and recommended controls

Answer

Project Gantt chart

Answer

Marketing campaign plan

Answer

HR onboarding checklist

Question 4

An enterprise architect is asked to evaluate a proposed SaaS vendor. Which security concern is MOST critical to assess?

Accepted Answer

Data residency, access controls, encryption standards, and compliance certifications (e.g., SOC 2, ISO 27001)

Answer

The vendor's office location

Answer

The vendor's marketing materials

Answer

The number of employees at the vendor

Question 5

What does 'non-repudiation' mean in the context of enterprise security architecture?

Accepted Answer

Providing proof that a specific party performed a specific action, preventing denial of that action

Answer

Ensuring data is encrypted at rest

Answer

Allowing users to reset their own passwords

Answer

Blocking unauthorized network access

Question 6

Which risk treatment option involves transferring risk to a third party, such as through insurance or outsourcing?

Accepted Answer

Risk transfer

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk acceptance