CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 2

Question 1

Which security architecture model divides an enterprise network into zones with increasing levels of trust and access control?

Accepted Answer

Zero-trust architecture with micro-segmentation

Answer

Zero-trust architecture with micro-segmentation divides networks into isolated zones, requiring verification for every access request regardless of location.

Question 2

What is the relationship between enterprise architecture and Business Continuity Planning (BCP)?

Accepted Answer

EA provides the architectural foundation (redundancy, failover, recovery) that BCP relies on to meet RTO and RPO targets

Answer

EA defines the technical redundancy and failover patterns that Business Continuity Plans depend on to achieve recovery time and point objectives.

Question 3

Which of the following is a key output of a security architecture review in the EA process?

Accepted Answer

Security risk assessment with identified gaps and recommended controls

Answer

A security architecture review produces a risk assessment identifying gaps between the current security posture and the required controls.

Question 4

An enterprise architect is asked to evaluate a proposed SaaS vendor. Which security concern is MOST critical to assess?

Accepted Answer

Data residency, access controls, encryption standards, and compliance certifications (e.g., SOC 2, ISO 27001)

Answer

For SaaS evaluation, data residency, encryption, access controls, and compliance certifications directly determine whether the vendor meets enterprise security requirements.

Question 5

What does 'non-repudiation' mean in the context of enterprise security architecture?

Accepted Answer

Providing proof that a specific party performed a specific action, preventing denial of that action

Answer

Non-repudiation ensures there is irrefutable evidence that a specific party performed an action, such as through digital signatures or audit logs.

CEA - Certified Enterprise Architect Practice Test

CEA - Certified Enterprise Architect Practice Test

CEA CEA - Certified Enterprise Architect EA Risk and Security Architecture Questions and Answers 2