NEW QUESTION 66
Britney is an architect designing a network security pattern for deployment across an organization. This will include major sites such as the corporate headquarters in New York and London, as well as smaller sites distributed across the globe. She is considering the requirements for firewalls, intrusion prevention systems, and content filtering systems. What factors does Britney need to address during the design phase to ensure scalability and repeatability across all sites? (Choose all that apply.)

NEW QUESTION 67
Bocklava, Inc. is looking to launch their Software as a Service in an environment that is accredited against a specific control framework (i.e. PCI, ISO). What is the most effective way to ensure the appropriate controls of this environment are properly funded and implemented?

NEW QUESTION 68
A new system is being built to track the SBOMs for all applications that are used in the company.
What are the primary items this system is tracking?

NEW QUESTION 69
Which combination of practices and technologies most effectively creates a scalable, secure
“paved road” for cloud-native application development?

NEW QUESTION 70
A Splunk architect wants to enrich notable events automatically with threat intelligence indicators such as known malicious IPs. Which ES framework supports this?

NEW QUESTION 71
AJ is a security architect at an organization. The organization wants to expand into a new market that requires processing of credit cards. However, the organization wants to limit their exposure to PCI compliance and audits. Of the options below, which is the best way to reduce risk while enabling the business?

NEW QUESTION 72
Sophia manages data ingestion for her organization’s SIEM. The data science team wants to perform real-time analytics on security data and asks Sophia for a copy of all new endpoint telemetry from the current point forward. The SIEM currently collects 15TB of endpoint telemetry every day. Which of the following solutions can Sophia use to best help the data science team?

NEW QUESTION 73
Which of the following describes CIS controls?

NEW QUESTION 74
A global enterprise is experiencing severe performance issues on their Splunk Enterprise Security Search Head due to an overwhelming number of distinct Asset and Identity lookups being performed simultaneously. What is the BEST architectural recommendation to resolve this performance issue?

NEW QUESTION 75
Alice helps design the vulnerability management program for a large corporation. The corporation strives to use ITIL best practices for IT and cybersecurity operations. Low severity vulnerabilities are most commonly remediated using what type of ITIL change?

NEW QUESTION 76
During a security code review, one of the senior developers complains to the security architect that there have been unauthorized modifications to the code going into the nightly builds. Which of the following methods can ensure only authorized code modifications are part of the nightly builds?

NEW QUESTION 77
An organization is migrating from their current firewalls to a next generation firewall system. As they begin to collect telemetry from their new firewalls, which of the following methods will ensure continuity of existing detections?

NEW QUESTION 78
The SOC team has received an alert for suspicious activity on a device assigned to a finance team member. The alert indicates that an unusual executable file was launched and several outbound connections were attempted to an external IP address. Which of the following is considered a “high-signal” data source due to its visibility into devices and ability to detect suspicious activity?

NEW QUESTION 79
Which security tool should be implemented as a control during the code check-in and commit process to scan code for vulnerabilities?

NEW QUESTION 80
During a SOC process and workflow review, the SOC manager observes that the analysts are spending a great deal of time jumping between the EDR, remote access, and IAM consoles to contextualize a finding. Which of the following will reduce the time to resolution with these issues in mind?