CSL CSL Security Architecture & Technology Leadership 2

Question 1

A cybersecurity leader is selecting between on-premises and cloud-based security solutions. Which factor most directly affects the risk profile of the decision?

Accepted Answer

Data residency and sovereignty requirements

Answer

Data residency laws dictate where certain data can be stored and processed, directly affecting regulatory compliance and legal risk.

Question 2

What is the purpose of a security reference architecture in an enterprise context?

Accepted Answer

To provide a blueprint for consistent, scalable security controls across the organization

Answer

A security reference architecture establishes standardized patterns and controls that teams can replicate consistently across projects and platforms.

Question 3

Which encryption standard is currently recommended by NIST for protecting data in US federal environments?

Accepted Answer

AES-256 (Advanced Encryption Standard)

Answer

NIST recommends AES-256 as the current standard for symmetric encryption of sensitive and classified data.

Question 4

A security architect proposes micro-segmentation for the data center. What is the primary security benefit?

Accepted Answer

Limits lateral movement of attackers within the network

Answer

Micro-segmentation creates isolated zones that prevent attackers who gain initial access from moving freely across systems.

Question 5

Which PKI component is responsible for issuing and revoking digital certificates in an organization?

Accepted Answer

Certificate Authority (CA)

Answer

The Certificate Authority is the trusted entity that issues, signs, and revokes digital certificates within a PKI infrastructure.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL CSL Security Architecture & Technology Leadership 2