CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 1

Question 1

Which enterprise architecture layer is PRIMARILY responsible for defining security policies, access controls, and identity management requirements?

Accepted Answer

Security Architecture within the Technology Architecture domain

Answer

Security architecture within the Technology Architecture domain defines security policies, identity management, and access control frameworks.

Question 2

What is the PRIMARY purpose of a threat modeling exercise in enterprise architecture?

Accepted Answer

To identify potential security threats, vulnerabilities, and corresponding mitigation strategies across the architecture

Answer

Threat modeling systematically identifies security threats and vulnerabilities so that mitigations can be designed into the architecture.

Question 3

Which NIST framework is MOST commonly referenced when building a security architecture in US federal or enterprise environments?

Accepted Answer

NIST SP 800-53 (Security and Privacy Controls)

Answer

NIST SP 800-53 provides a comprehensive catalog of security and privacy controls widely used in US federal and enterprise security architectures.

Question 4

In enterprise architecture, what does the term 'defense in depth' mean?

Accepted Answer

Layering multiple security controls so that if one fails, others continue to protect the asset

Answer

Defense in depth applies multiple, overlapping security controls across different layers so that no single point of failure compromises the entire system.

Question 5

An enterprise architect is designing a cloud migration strategy. Which security principle requires that each component only has access to the resources it needs?

Accepted Answer

Principle of least privilege

Answer

The principle of least privilege ensures components and users have only the minimum access required to perform their function, reducing the attack surface.

CEA - Certified Enterprise Architect Practice Test

CEA - Certified Enterprise Architect Practice Test

CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 1