SABSA Exam 3 questions with
complete solutions
The three constraints in strategy development can be which of the
following: - correct answer ✔✔Direct, consequential, or peripheral
Each of the following can be used in defining an organizations desired state except for: - correct
answer ✔✔None of the above
An information security strategy is - correct answer ✔✔The objectives of information security
coupled with the plans to achieve it
From the text and class, which one of the following is not an identified causes for strategy
failures: - correct answer ✔✔Knowing the culture and the landscape of the organization and the
environment it operates in
The two general classes of constraints are: - correct answer ✔✔Contextual and Operational
The two greatest issues or difficulties in developing strategy are: - correct answer ✔✔Cultural
and Structural
The NIST Cyber Security Framework (CSF) and the Sherwood Applied Business Security
Architecture (SABSA) are both Security Architecture Frameworks and which of the following
answers best describes the characteristics of both frameworks - correct answer ✔✔NIST CSF
and SABSA are technology neutral,
SABSA is both technology and controls neutral
complete solutions
The three constraints in strategy development can be which of the
following: - correct answer ✔✔Direct, consequential, or peripheral
Each of the following can be used in defining an organizations desired state except for: - correct
answer ✔✔None of the above
An information security strategy is - correct answer ✔✔The objectives of information security
coupled with the plans to achieve it
From the text and class, which one of the following is not an identified causes for strategy
failures: - correct answer ✔✔Knowing the culture and the landscape of the organization and the
environment it operates in
The two general classes of constraints are: - correct answer ✔✔Contextual and Operational
The two greatest issues or difficulties in developing strategy are: - correct answer ✔✔Cultural
and Structural
The NIST Cyber Security Framework (CSF) and the Sherwood Applied Business Security
Architecture (SABSA) are both Security Architecture Frameworks and which of the following
answers best describes the characteristics of both frameworks - correct answer ✔✔NIST CSF
and SABSA are technology neutral,
SABSA is both technology and controls neutral
