SABSA Module F2 Exam Questions With
Correct Answers
Which 2 actions does the Relying Party perform in the trust broker model? -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-1. Authenticates identity
| | |
2. Checks authorisation
| |
Which two (2) actions does the Claimant perform in the trust brokering model -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-1. Claims identity
| | |
2. Claims authority
| |
Where in the SABSA Architecture Matrix is Personnel Management Tools &
| | | | | | | | | | |
Standards located? - CORRECT ANSWER✔✔-Component Layer, People (Who)
| | | | | | | |
Column
Where in the SABSA Architecture Matrix are Risk Management Objectives and
| | | | | | | | | | |
enablement and control objectives located? - CORRECT ANSWER✔✔-Conceptual
| | | | | | | |
layer, Motivation (Why) column
| | |
What type of attribute is Trust? - CORRECT ANSWER✔✔-Trust is a Relational
| | | | | | | | | | | |
business attribute not a technical one.
| | | | |
,What objectives/outcomes exist at the Logical Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Risk
| | | | | | | | | |
Management Policies; |
Domain Policies |
What objectives/outcomes exist at the Logical Architecture layer in the Location
| | | | | | | | | | |
(Where) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Domain Maps
| | | | | | | | |
Domain Definitions; Inter-domain associations & interactions
| | | | |
What objectives/outcomes exist at the Contextual Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Business
| | | | | | | | |
Risk - Opportunities & Threats Inventory
| | | | | |
What objectives/outcomes exist at the Conceptual Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Risk
| | | | | | | | | |
Management Objectives; |
Enablement & Control Objectives | | |
Policy Architecture
|
What objectives/outcomes exist at the Conceptual Architecture layer in the
| | | | | | | | | |
Assets (What) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Business
| | | | | | | | | |
Attributes Profile |
What is the main difference between the Owner role and Trustee role in the
| | | | | | | | | | | | | |
SABSA Governance model? - CORRECT ANSWER✔✔-The Owner role is primarily
| | | | | | | | | |
ACCOUNTABLE for the performance of assets (attributes) within a specific
| | | | | | | | | |
domain.
, The Trustee role is RESPONSIBLE for the performance of assets (attributes) within
| | | | | | | | | | | |
a specific domain. Trustee is a delegated authority role. Consults domain owner
| | | | | | | | | | | |
on risk appetite.
| |
Describe the concept of the SABSA Business Attributes Profile - CORRECT
| | | | | | | | | | |
ANSWER✔✔-It is the heart of the SABSA methodology. The Business Attributes | | | | | | | | | | |
Profile is the 'requirements engineering' technique that makes SABSA truly
| | | | | | | | | |
unique and provides linkage between business requirements and technology /
| | | | | | | | | |
process design. |
What are the four (4) SABSA start-up approaches? - CORRECT ANSWER✔✔-1.
| | | | | | | | | | |
Executive Interview Approach | |
2. Analysis followed by validation
| | | |
3. SABSA Fast-Track
| |
4. Blended Approach
| |
List the two high-level categories of the SABSA Policy Framework - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-1. Enterprise Policy | |
2. Domain Policy
| |
TRUE or FALSE: Trust between domains is also constant - CORRECT ANSWER✔✔-
| | | | | | | | | | |
False. Each domain should enforce its own security policy, independently of other
| | | | | | | | | | |
domains. Trust between domains will have different registration authorities.
| | | | | | | | |
What is the definition of a Security Domain according to SABSA? - CORRECT
| | | | | | | | | | | | |
ANSWER✔✔-A security domain is a set of elements subject to a common security| | | | | | | | | | | |
policy defined and owned by a single policy authority.
| | | | | | | | |
Correct Answers
Which 2 actions does the Relying Party perform in the trust broker model? -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-1. Authenticates identity
| | |
2. Checks authorisation
| |
Which two (2) actions does the Claimant perform in the trust brokering model -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-1. Claims identity
| | |
2. Claims authority
| |
Where in the SABSA Architecture Matrix is Personnel Management Tools &
| | | | | | | | | | |
Standards located? - CORRECT ANSWER✔✔-Component Layer, People (Who)
| | | | | | | |
Column
Where in the SABSA Architecture Matrix are Risk Management Objectives and
| | | | | | | | | | |
enablement and control objectives located? - CORRECT ANSWER✔✔-Conceptual
| | | | | | | |
layer, Motivation (Why) column
| | |
What type of attribute is Trust? - CORRECT ANSWER✔✔-Trust is a Relational
| | | | | | | | | | | |
business attribute not a technical one.
| | | | |
,What objectives/outcomes exist at the Logical Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Risk
| | | | | | | | | |
Management Policies; |
Domain Policies |
What objectives/outcomes exist at the Logical Architecture layer in the Location
| | | | | | | | | | |
(Where) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Domain Maps
| | | | | | | | |
Domain Definitions; Inter-domain associations & interactions
| | | | |
What objectives/outcomes exist at the Contextual Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Business
| | | | | | | | |
Risk - Opportunities & Threats Inventory
| | | | | |
What objectives/outcomes exist at the Conceptual Architecture layer in the
| | | | | | | | | |
Motivation (Why) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Risk
| | | | | | | | | |
Management Objectives; |
Enablement & Control Objectives | | |
Policy Architecture
|
What objectives/outcomes exist at the Conceptual Architecture layer in the
| | | | | | | | | |
Assets (What) column of the SABSA Matrix? - CORRECT ANSWER✔✔-Business
| | | | | | | | | |
Attributes Profile |
What is the main difference between the Owner role and Trustee role in the
| | | | | | | | | | | | | |
SABSA Governance model? - CORRECT ANSWER✔✔-The Owner role is primarily
| | | | | | | | | |
ACCOUNTABLE for the performance of assets (attributes) within a specific
| | | | | | | | | |
domain.
, The Trustee role is RESPONSIBLE for the performance of assets (attributes) within
| | | | | | | | | | | |
a specific domain. Trustee is a delegated authority role. Consults domain owner
| | | | | | | | | | | |
on risk appetite.
| |
Describe the concept of the SABSA Business Attributes Profile - CORRECT
| | | | | | | | | | |
ANSWER✔✔-It is the heart of the SABSA methodology. The Business Attributes | | | | | | | | | | |
Profile is the 'requirements engineering' technique that makes SABSA truly
| | | | | | | | | |
unique and provides linkage between business requirements and technology /
| | | | | | | | | |
process design. |
What are the four (4) SABSA start-up approaches? - CORRECT ANSWER✔✔-1.
| | | | | | | | | | |
Executive Interview Approach | |
2. Analysis followed by validation
| | | |
3. SABSA Fast-Track
| |
4. Blended Approach
| |
List the two high-level categories of the SABSA Policy Framework - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-1. Enterprise Policy | |
2. Domain Policy
| |
TRUE or FALSE: Trust between domains is also constant - CORRECT ANSWER✔✔-
| | | | | | | | | | |
False. Each domain should enforce its own security policy, independently of other
| | | | | | | | | | |
domains. Trust between domains will have different registration authorities.
| | | | | | | | |
What is the definition of a Security Domain according to SABSA? - CORRECT
| | | | | | | | | | | | |
ANSWER✔✔-A security domain is a set of elements subject to a common security| | | | | | | | | | | |
policy defined and owned by a single policy authority.
| | | | | | | | |
