CSL CSL Security Architecture & Technology Management

Question 1

Which security architecture framework is widely used by US federal agencies and defines a zero trust model?

Accepted Answer

NIST SP 800-207

Answer

NIST SP 800-207 is the federal standard defining zero trust architecture principles adopted across US government agencies.

Question 2

A cybersecurity leader wants to ensure security is integrated from the start of software development. Which approach best achieves this?

Accepted Answer

Shift-left security

Answer

Shift-left security embeds security controls early in the development lifecycle, reducing vulnerabilities before they reach production.

Question 3

What is the primary purpose of a security reference architecture in an enterprise?

Accepted Answer

Provide a reusable blueprint for consistent security design across systems

Answer

A security reference architecture provides standardized, reusable patterns that guide consistent security implementation across the enterprise.

Question 4

Which of the following best describes defense-in-depth as a security architecture principle?

Accepted Answer

Multiple overlapping layers of security controls

Answer

Defense-in-depth uses multiple overlapping security layers so that if one control fails, others still protect the asset.

Question 5

A CSL leader must evaluate technology investments for security. What framework helps align security technology to business capability gaps?

Accepted Answer

SABSA (Sherwood Applied Business Security Architecture)

Answer

SABSA provides a business-driven framework for developing security architectures aligned to organizational capability requirements.

(CSL) Cybersecurity Leadership Certification Practice Test