D488 Cybersecurity Architecture and Engineering - Set 1 - Part 2

Correct Answer: Centralizing data collection and analysis

SIEM aggregates and analyzes security data across an enterprise, providing visibility into potential threats and compliance reporting.

Correct Answer: Website speed and performance

A CDN optimizes content delivery, improving website performance, especially during high traffic volumes or disasters.

Correct Answer: Cloud Access Security Broker (CASB)

A CASB helps organizations manage security and compliance for cloud services by providing visibility and control over data access.

Correct Answer: Regular audits and assessments

Conducting audits and assessments of third-party vendors ensures that they meet security standards and maintain compliance.

Correct Answer: Comprehensive documentation

Thorough documentation of processes and procedures is essential for effective incident response and recovery.

Correct Answer: To identify and prioritize risks

A risk assessment systematically identifies potential threats and evaluates their impact, helping organizations prioritize their responses.

Correct Answer: Data validation checks

Implementing data validation checks ensures that data is accurately transferred and maintains its integrity throughout the migration process.

Correct Answer: Reduced data breach risk

Tokenization replaces sensitive data with non-sensitive tokens, minimizing the impact of data breaches by protecting the original data.

Correct Answer: It identifies vulnerabilities before they can be exploited.

Penetration testing simulates attacks to discover weaknesses in systems, allowing organizations to remediate issues proactively.

Correct Answer: To monitor and control data transfers

DLP solutions help organizations prevent unauthorized data transmissions, ensuring sensitive information remains protected.

Correct Answer: Trojan

Trojans masquerade as benign applications to trick users into installing them, often leading to system compromise.

Correct Answer: To prevent unauthorized access to a network

Firewalls serve as a barrier between trusted and untrusted networks, filtering traffic based on predefined security rules.

Correct Answer: It locks users out of their systems until a ransom is paid.

Ransomware encrypts user files or locks access to systems, demanding payment to restore access.

Correct Answer: Implementing multi-factor authentication

Multi-factor authentication adds an extra layer of security, making it more difficult for attackers to gain unauthorized access, even if credentials are compromised.

Correct Answer: Integrating security testing throughout the development lifecycle

Security testing should be embedded in every phase of development to identify vulnerabilities early and ensure a secure final product.

Correct Answer: It restricts users to the minimum permissions required to perform their tasks.

The principle of least privilege minimizes the potential damage caused by compromised accounts or insider threats by limiting access rights.

Correct Answer: Data encryption

Encrypting data at rest ensures that sensitive information remains confidential and protected against unauthorized access.

Correct Answer: To encrypt internet traffic and protect data privacy

A VPN creates a secure connection over the internet, encrypting data to safeguard user privacy and prevent eavesdropping.

Correct Answer: It assesses the potential impact of disruptions on critical business functions.

A BIA evaluates the effects of business interruptions, helping organizations prioritize recovery efforts and resources.

Correct Answer: To monitor network traffic for suspicious activity

An IDS analyzes network traffic to identify potential threats and alert administrators to suspicious behavior.