1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 10)

Questions 46–47

1. 46foundation · easy

   Which statement best describes the defense-in-depth strategy?

   • AUsing only technical controls and ignoring physical and administrative controls
   • BUsing multiple layers of security controls so that if one fails, others still provide protection
   • CRelying on a single, strong security control to protect all assets
   • DPlacing all security controls at the network perimeter to block external threats
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A network administrator is configuring a new branch office. The administrator wants to ensure that even if an attacker compromises a workstation, they cannot easily reach the finance department's servers. Which network security controls best support this defense-in-depth goal?

   • AInstall a network-based IDS that monitors traffic and alerts on suspicious activity.
   • BDeploy a VPN concentrator for remote access and require all employees to use it.
   • CSegment the network into separate VLANs for different departments and apply ACLs that restrict traffic between them.
   • DEnable a strong password policy and require multi-factor authentication for all users.
   Reveal Solution Discussion Select an answer first