CISSP Question #1086: Real Exam Question with Answer & Explanation

Question

What is the correct order of execution for security architecture?

Options

• AGovernance, strategy and program management, project delivery, operations
• BStrategy and program management, governance, project delivery, operations
• CGovernance, strategy and program management, operations, project delivery
• DStrategy and program management, project delivery, governance, operations

Explanation

Security architecture follows a defined hierarchical execution order where governance establishes the foundational rules before strategy, delivery, and operations can proceed.

Common mistakes.

• B. Strategy and program management cannot logically precede governance, as governance provides the foundational policies, mandates, and authority structures that strategy must align to and derive direction from.
• C. Placing operations before project delivery is incorrect because operations requires that security controls and systems have first been built and deployed through project delivery before they can be run and maintained.
• D. This order places governance after project delivery, which is fundamentally incorrect since governance must define the rules, compliance requirements, and oversight structures that guide both strategy and project execution from the outset.

Concept tested. Security architecture execution order and lifecycle phases

Reference. https://learn.microsoft.com/en-us/security/adoption/security-adoption-overview

No community discussion yet for this question.