Tüm alıştırma soruları

An enterprise security organization is restructuring its internal governance documentation to align with ISO/IEC 27001 and NIST SP 800-53 standards. Match each formal security governance document type to the specific operational characteristic and enforcement authority that defines its role in the security program.

A security analyst is triaging log files collected by a SIEM system across web applications, authentication servers, and system logs. Match each log snippet on the left to the corresponding security event or attack vector on the right.

Match each third-party risk management agreement type on the left with its correct operational description on the right.

Match each enterprise identity and access management (IAM) protocol or standard on the left with its primary architectural function on the right.

Match each security governance document type to its corresponding operational characteristic within an enterprise governance framework.

An enterprise security governance team is reviewing its information security documentation hierarchy to resolve audit findings regarding governance ambiguity. Match each governance document type on the left with its corresponding organizational characteristic and legal/enforcement property on the right.

An organization is updating its security governance hierarchy to resolve operational ambiguities discovered during a regulatory audit. Match each governance document type on the left with its corresponding organizational scope and enforceability characteristic on the right.

Match each third-party risk management artifact or supply chain control on the left with its corresponding oversight function on the right.

A financial enterprise is evaluating several third-party software and service providers during a comprehensive supply chain risk review. Match each vendor security assessment artifact on the left with the operational compliance or risk verification requirement it satisfies on the right.

Match each third-party risk management agreement type on the left with its corresponding primary purpose on the right.

A lead security architect is structuring an enterprise third-party risk management (TPRM) framework to mitigate supply chain exposure and enforce regulatory compliance across downstream service providers. Match each third-party oversight mechanism on the left with its primary operational objective on the right.

An enterprise organization is establishing a comprehensive third-party risk governance program and must evaluate four distinct independent security audit and attestation deliverables submitted by vendor candidates. Match each audit or attestation deliverable on the left with its defining operational scope and objective on the right.

During an enterprise security alignment following an international expansion, an organization must formalize its data governance framework. Match each data management role on the left with its corresponding primary operational responsibility on the right.

An enterprise security architect is reviewing identity and access management (IAM) controls across network access servers, policy engines, and central logging services. Match each security mechanism on the left with the specific AAA function or protocol capability on the right that best describes its primary operational purpose.

A security architect is designing an enterprise Zero Trust Architecture (ZTA) baseline aligned with NIST SP 800-207. During a dynamic context evaluation event, distinct logical control plane and data plane components handle distinct duties. Match each Zero Trust logical component on the left with its precise operational role during access decision making and execution on the right.

Match each deception technology component on the left with its corresponding functional definition on the right.

An enterprise risk management team is auditing the security controls of an automated insurance claims processing platform. Match each system security implementation on the left to the corresponding security objective (CIA Triad pillar or Non-Repudiation) it primarily satisfies on the right.

A lead security analyst is evaluating enterprise cryptographic controls to remediate vulnerabilities identified in a recent security audit. Match each cryptographic mechanism on the left with its primary operational security objective or implementation purpose on the right.

During an enterprise Security Operations Center (SOC) investigation, telemetry from various log sources is ingested into a SIEM platform. Match each log snippet on the left with the corresponding event description on the right.

A network security consultant is auditing a newly implemented TACACS+ access control solution for datacenter routers. Match each administrative operational activity to its corresponding pillar within the AAA framework.