CSL CSL Security Architecture & Technology Management

Question 1

Which security architecture framework is widely used by US federal agencies and defines a zero trust model?

Accepted Answer

NIST SP 800-207

Answer

ISO 27001

Answer

COBIT 5

Answer

SABSA

Question 2

A cybersecurity leader wants to ensure security is integrated from the start of software development. Which approach best achieves this?

Accepted Answer

Shift-left security

Answer

Penetration testing at release

Answer

Firewall-only perimeter defense

Answer

Post-deployment patching

Question 3

What is the primary purpose of a security reference architecture in an enterprise?

Accepted Answer

Provide a reusable blueprint for consistent security design across systems

Answer

Document all known vulnerabilities

Answer

Replace the need for security policies

Answer

Track individual user behavior

Question 4

Which of the following best describes defense-in-depth as a security architecture principle?

Accepted Answer

Multiple overlapping layers of security controls

Answer

One highly effective perimeter firewall

Answer

Encrypting all data at rest only

Answer

Relying solely on endpoint detection tools

Question 5

A CSL leader must evaluate technology investments for security. What framework helps align security technology to business capability gaps?

Accepted Answer

SABSA (Sherwood Applied Business Security Architecture)

Answer

PCI DSS

Answer

HIPAA

Answer

SOC 2

Question 6

What is the key security benefit of network segmentation in enterprise architecture?

Accepted Answer

Limits lateral movement of attackers across systems

Answer

Eliminates the need for encryption

Answer

Removes the need for firewalls

Answer

Reduces software licensing costs