ISC Practice Test 7 — 10 Questions

Question 1

Which TWO elements are required to effectively document a security architecture for audit purposes? (Select TWO)

Accepted Answer

Detailed design diagrams. Auditors require the design itself (diagrams) and the security controls implemented to protect the assets.

Answer

Developer social security numbers

Answer

Vendor marketing brochures

Answer

Employee cafeteria menu

Question 2

Which TWO of the following are best practices for securing API endpoints?

Accepted Answer

Using OAuth/OIDC for authentication.. Rate limiting and strong authentication are foundational API security practices.

Answer

Publicly exposing all internal endpoints.

Answer

Ignoring input validation.

Answer

Requiring no authentication for GET requests.

Question 3

When configuring Cisco ASA firewalls for high availability, which protocol is used to maintain state information between the primary and standby units?

Accepted Answer

Stateful Failover (Failover Link). Cisco ASA high availability uses a dedicated failover link to exchange state information between the active and standby units, a feature called Stateful Failover. This link synchronizes connection tables, translation tables, and other stateful data so the standby can take over without dropping established sessions. This is why A is correct.

Answer

HSRP

Answer

OSPF

Answer

VRRP

Question 4

An organization is using Azure to host sensitive data. To prevent data exfiltration, the architect needs to restrict storage account access to only the corporate network. Which feature should be used?

Accepted Answer

Azure Storage Firewalls and Virtual Networks. Azure Storage Firewalls and Virtual Networks is the native feature that restricts access to a storage account based on network rules — allowing only specified virtual networks, subnets, or public IP ranges. By configuring the storage account's network rules to allow only the corporate network (via VNet service endpoints or private endpoints), the architect directly prevents data exfiltration from unauthorized networks. This is the precise control the question describes.

Answer

Azure AD Conditional Access

Answer

Azure Policy

Answer

Azure Bastion

Question 5

What is the primary purpose of a TPM chip in a laptop?

Accepted Answer

To store cryptographic keys and ensure platform integrity.. The Trusted Platform Module (TPM) stores cryptographic keys, performs hardware-based platform integrity checks, and enables secure boot.

Answer

To increase CPU performance.

Answer

To accelerate disk encryption.

Answer

To provide biometric authentication.

Question 6

A company is migrating to Microsoft 365. You need to ensure that users are only able to access SharePoint sites from managed devices that are compliant with corporate security policies. Which service provides this conditional access control?

Accepted Answer

Microsoft Entra Conditional Access. Microsoft Entra ID (formerly Azure AD) Conditional Access policies are used to evaluate device compliance status before granting access to M365 resources.

Answer

SharePoint Online Admin Center

Answer

Microsoft Purview

Answer

Microsoft Intune

Question 7

You are utilizing TOGAF 10 to develop an Architecture Content Framework. Which component of the Architecture Development Method (ADM) phase A is specifically required to define the scope and identify stakeholders?

Accepted Answer

Architecture Vision. TOGAF ADM Phase A (Architecture Vision) is where the scope of the architecture engagement is defined, stakeholders are identified, and the Architecture Vision is produced. The Phase A inputs and steps explicitly include defining scope, identifying stakeholders, and creating the Statement of Architecture Work. This makes A the correct answer.

Answer

Business Architecture

Answer

Transition Planning

Answer

Architecture Requirements Repository

Question 8

When performing an architectural review of a CI/CD pipeline, which security control is most critical for preventing unauthorized deployment of code?

Accepted Answer

Multi-party approval. Multi-party approval is the most critical control for preventing unauthorized deployment because it requires multiple authorized individuals to approve a deployment before it proceeds. This separation of duties ensures that no single compromised account or malicious insider can push code to production. It directly addresses the risk of unauthorized deployment by adding a human gate.

Answer

Hardened build server

Answer

Automated scanning

Answer

Encryption at rest

Question 9

What is the primary function of an EDR (Endpoint Detection and Response) tool compared to traditional Antivirus?

Accepted Answer

To provide visibility and response to suspicious behavioral activity.. EDR focuses on continuous monitoring and recording of endpoint activities to enable investigation, threat hunting, and automated response to sophisticated threats.

Answer

To encrypt the hard drive.

Answer

To act as a personal firewall.

Answer

To block known file-based malware signatures.

Question 10

What is the primary role of a 'Compliance Liaison' in an enterprise architecture team?

Accepted Answer

To facilitate communication between technical teams and audit.. A liaison bridges the gap between technical teams and audit requirements, ensuring that compliance is understood and implemented.

Answer

To update firewall configurations.

Answer

To perform penetration testing.

Answer

To manage the budget for security projects.