Question 150 A secure cabinet permits technicians to remove evidence drives without logging. Which safeguard should be strengthened? Align UPS runtime, generator startup and load-transfer capacity to the power gap Provide monitored cooling resilience sized for critical heat loads and failure scenarios Combine access control with intrusion detection and monitored response Use locked evidence storage with access logs, custody documentation and restricted retrieval Explanation Correct Answer D:Physical evidence custody requires accountability for each movement and handler. Incorrect Answers A:Resilience fails when transition time exceeds available stored power; it is relevant where a data center's UPS covers five minutes but generators need fifteen minutes to stabilize, whereas the current facts require use locked evidence storage with access logs, custody documentation and restricted retrieval to address the stated problem. B:This option fits a different fact pattern where a data room's HVAC has no redundancy despite overheating alarms and continuous processing demands: power availability alone cannot keep hardware safe without adequate environmental control; the current case instead requires use locked evidence storage with access logs, custody documentation and restricted retrieval. C:This option fits a different fact pattern where a server room has badge readers but no alarms for a forced door: preventive door controls require timely detection of forced-entry bypasses; the current case instead requires use locked evidence storage with access logs, custody documentation and restricted retrieval.
Question 151 A data room's HVAC has no redundancy despite overheating alarms and continuous processing demands. What measure matters? Assess fire detection and suppression options against occupancy and equipment hazards Use locked evidence storage with access logs, custody documentation and restricted retrieval Combine access control with intrusion detection and monitored response Provide monitored cooling resilience sized for critical heat loads and failure scenarios Explanation Correct Answer D:Power availability alone cannot keep hardware safe without adequate environmental control. Incorrect Answers A:Suppression choices must consider safety, local codes and damage to critical systems; although this helps when a fire-control proposal uses water suppression without evaluating energized equipment and people, it leaves the current case's need to provide monitored cooling resilience sized for critical heat loads and failure scenarios unresolved. B:Physical evidence custody requires accountability for each movement and handler; this responds to the different circumstance in which a secure cabinet permits technicians to remove evidence drives without logging, while the current case states that a data room's HVAC has no redundancy despite overheating alarms and continuous processing demands, calling for provide monitored cooling resilience sized for critical heat loads and failure scenarios. C:This option fits a different fact pattern where a server room has badge readers but no alarms for a forced door: preventive door controls require timely detection of forced-entry bypasses; the current case instead requires provide monitored cooling resilience sized for critical heat loads and failure scenarios.
Question 152 A major project omits security requirements until final acceptance testing. Which lifecycle practice should be changed? Establish operational ownership, monitoring and maintenance transition before deployment Remove or securely redirect integrations, credentials and residual data as part of decommissioning Perform validation against actual stakeholder needs in addition to requirement verification Elicit security and privacy requirements with stakeholders before architecture approval Explanation Correct Answer D:Late discovery makes fixes more expensive and can invalidate design assumptions. Incorrect Answers A:Security responsibilities continue after development and must be operationally sustainable; this responds to the different circumstance in which a cloud service goes live without any approved support or patch owner, while the current case states that a major project omits security requirements until final acceptance testing, calling for elicit security and privacy requirements with stakeholders before architecture approval. B:System retirement is a controlled security phase, not merely turning off a server; this responds to the different circumstance in which a legacy platform is being retired but its integration endpoints remain active, while the current case states that a major project omits security requirements until final acceptance testing, calling for elicit security and privacy requirements with stakeholders before architecture approval. C:For the separate situation in which developers argue successful unit tests prove a regulated service meets its intended mission, verification asks whether specifications were met; validation asks whether the correct system was built; here the stated problem requires elicit security and privacy requirements with stakeholders before architecture approval.
Question 153 Developers argue successful unit tests prove a regulated service meets its intended mission. What additional lifecycle activity is required? Reevaluate material architectural security requirements and assurance evidence after the change Establish operational ownership, monitoring and maintenance transition before deployment Perform validation against actual stakeholder needs in addition to requirement verification Elicit security and privacy requirements with stakeholders before architecture approval Explanation Correct Answer C:Verification asks whether specifications were met; validation asks whether the correct system was built. Incorrect Answers A:The other scenario states that a purchased platform changes design after threat modeling but before release, where changes to trust boundaries or features can invalidate earlier verification results; by contrast, the present case requires perform validation against actual stakeholder needs in addition to requirement verification. B:This option fits a different fact pattern where a cloud service goes live without any approved support or patch owner: security responsibilities continue after development and must be operationally sustainable; the current case instead requires perform validation against actual stakeholder needs in addition to requirement verification. D:Late discovery makes fixes more expensive and can invalidate design assumptions; this responds to the different circumstance in which a major project omits security requirements until final acceptance testing, while the current case states that developers argue successful unit tests prove a regulated service meets its intended mission, calling for perform validation against actual stakeholder needs in addition to requirement verification.
Question 154 A cloud service goes live without any approved support or patch owner. What lifecycle risk should be addressed? Reevaluate material architectural security requirements and assurance evidence after the change Establish operational ownership, monitoring and maintenance transition before deployment Perform validation against actual stakeholder needs in addition to requirement verification Remove or securely redirect integrations, credentials and residual data as part of decommissioning Explanation Correct Answer B:Security responsibilities continue after development and must be operationally sustainable. Incorrect Answers A:Changes to trust boundaries or features can invalidate earlier verification results; it is relevant where a purchased platform changes design after threat modeling but before release, whereas the current facts require establish operational ownership, monitoring and maintenance transition before deployment to address the stated problem. C:For the separate situation in which developers argue successful unit tests prove a regulated service meets its intended mission, verification asks whether specifications were met; validation asks whether the correct system was built; here the stated problem requires establish operational ownership, monitoring and maintenance transition before deployment. D:The other scenario states that a legacy platform is being retired but its integration endpoints remain active, where system retirement is a controlled security phase, not merely turning off a server; by contrast, the present case requires establish operational ownership, monitoring and maintenance transition before deployment.
Question 155 A legacy platform is being retired but its integration endpoints remain active. What should retirement planning include? Remove or securely redirect integrations, credentials and residual data as part of decommissioning Elicit security and privacy requirements with stakeholders before architecture approval Reevaluate material architectural security requirements and assurance evidence after the change Establish operational ownership, monitoring and maintenance transition before deployment Explanation Correct Answer A:System retirement is a controlled security phase, not merely turning off a server. Incorrect Answers B:For the separate situation in which a major project omits security requirements until final acceptance testing, late discovery makes fixes more expensive and can invalidate design assumptions; here the stated problem requires remove or securely redirect integrations, credentials and residual data as part of decommissioning. C:For the separate situation in which a purchased platform changes design after threat modeling but before release, changes to trust boundaries or features can invalidate earlier verification results; here the stated problem requires remove or securely redirect integrations, credentials and residual data as part of decommissioning. D:This option fits a different fact pattern where a cloud service goes live without any approved support or patch owner: security responsibilities continue after development and must be operationally sustainable; the current case instead requires remove or securely redirect integrations, credentials and residual data as part of decommissioning.
Question 156 A purchased platform changes design after threat modeling but before release. What governance needs to occur? Perform validation against actual stakeholder needs in addition to requirement verification Reevaluate material architectural security requirements and assurance evidence after the change Elicit security and privacy requirements with stakeholders before architecture approval Remove or securely redirect integrations, credentials and residual data as part of decommissioning Explanation Correct Answer B:Changes to trust boundaries or features can invalidate earlier verification results. Incorrect Answers A:The other scenario states that developers argue successful unit tests prove a regulated service meets its intended mission, where verification asks whether specifications were met; validation asks whether the correct system was built; by contrast, the present case requires reevaluate material architectural security requirements and assurance evidence after the change. C:This option fits a different fact pattern where a major project omits security requirements until final acceptance testing: late discovery makes fixes more expensive and can invalidate design assumptions; the current case instead requires reevaluate material architectural security requirements and assurance evidence after the change. D:System retirement is a controlled security phase, not merely turning off a server; this responds to the different circumstance in which a legacy platform is being retired but its integration endpoints remain active, while the current case states that a purchased platform changes design after threat modeling but before release, calling for reevaluate material architectural security requirements and assurance evidence after the change.
Question 157 A cloud workload accepts web traffic but must not permit direct Internet connections to its database. What network design is most appropriate? Measure and control packet jitter, latency and loss for real-time traffic Separate an authenticated management plane from general user traffic Place the database in isolated network segments with narrowly authorized application paths Assess latency-sensitive protocols and use buffering or alternative paths where viable Explanation Correct Answer C:Segmentation reduces attack reachability to data services beyond endpoint authentication alone. Incorrect Answers A:For the separate situation in which a voice service suffers choppy calls despite ample average bandwidth, voice quality depends on delay variation and loss, not merely peak bandwidth; here the stated problem requires place the database in isolated network segments with narrowly authorized application paths. B:Out-of-band or restricted management limits lateral access to high-privilege device interfaces; this responds to the different circumstance in which a bank routes server administration through the same open employee Wi-Fi as web browsing, while the current case states that a cloud workload accepts web traffic but must not permit direct Internet connections to its database, calling for place the database in isolated network segments with narrowly authorized application paths. D:For the separate situation in which a satellite connection has very high round-trip delay, harming an interactive application, throughput capacity cannot remove the effects of propagation delay on request-response workflows; here the stated problem requires place the database in isolated network segments with narrowly authorized application paths.
Question 158 A bank routes server administration through the same open employee Wi-Fi as web browsing. What architecture change is warranted? Create industrial security zones and tightly governed conduits between corporate and OT networks Require supported TLS versions and validated certificate-based server authentication Separate an authenticated management plane from general user traffic Require authorized network admission and role-appropriate access beyond link encryption Explanation Correct Answer C:Out-of-band or restricted management limits lateral access to high-privilege device interfaces. Incorrect Answers A:The other scenario states that a manufacturing plant permits unrestricted traffic from office laptops to programmable controllers, where explicit segmentation constrains malware spread and protects safety-critical control traffic; by contrast, the present case requires separate an authenticated management plane from general user traffic. B:Secure transport depends on current protocol configuration and identity validation; it is relevant where a public API uses obsolete SSL negotiation even though clients support modern TLS, whereas the current facts require separate an authenticated management plane from general user traffic to address the stated problem. D:This option fits a different fact pattern where a research lab encrypts Wi-Fi but allows any employee to join a sensitive test network: encryption of radio frames alone does not establish need-to-know for the service network; the current case instead requires separate an authenticated management plane from general user traffic.
Question 159 A public API uses obsolete SSL negotiation even though clients support modern TLS. What is the right design improvement? Require supported TLS versions and validated certificate-based server authentication Separate an authenticated management plane from general user traffic Place IoT endpoints in a separately controlled segment with explicit allowed egress Mutually authenticate endpoints and encrypt model traffic across network trust boundaries Explanation Correct Answer A:Secure transport depends on current protocol configuration and identity validation. Incorrect Answers B:Out-of-band or restricted management limits lateral access to high-privilege device interfaces; this responds to the different circumstance in which a bank routes server administration through the same open employee Wi-Fi as web browsing, while the current case states that a public API uses obsolete SSL negotiation even though clients support modern TLS, calling for require supported TLS versions and validated certificate-based server authentication. C:Device category and trustworthiness should drive zone placement and traffic policy; it is relevant where an enterprise wants to prevent an untrusted IoT device from entering the employee production segment, whereas the current facts require require supported TLS versions and validated certificate-based server authentication to address the stated problem. D:For the separate situation in which a distributed learning cluster sends private model inputs to public edge nodes without transport authentication, large AI datasets still require authenticated transport and confidentiality on untrusted links; here the stated problem requires require supported TLS versions and validated certificate-based server authentication.
Question 160 Two business units share one VLAN and cross-unit broadcast access violates isolation requirements. What should change? Protect controller APIs using least-privilege authorization, strong authentication and audit Move workloads into distinct logical segments with enforced inter-segment policy Use dedicated identity and privileged-access controls for administration rather than content delivery Require authorized network admission and role-appropriate access beyond link encryption Explanation Correct Answer B:VLAN separation is useful only when routed or firewall paths also enforce the intended trust boundary. Incorrect Answers A:For the separate situation in which an SDN controller API can change routing across every tenant without strong access control, a centralized control plane has broad blast radius if management access is compromised; here the stated problem requires move workloads into distinct logical segments with enforced inter-segment policy. C:This option fits a different fact pattern where a developer suggests using a CDN to authenticate private database administrators: a CDN optimizes distribution but does not replace administrative authentication and authorization; the current case instead requires move workloads into distinct logical segments with enforced inter-segment policy. D:The other scenario states that a research lab encrypts Wi-Fi but allows any employee to join a sensitive test network, where encryption of radio frames alone does not establish need-to-know for the service network; by contrast, the present case requires move workloads into distinct logical segments with enforced inter-segment policy.
