1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of combining multiple defensive mechanisms in a defense-in-depth strategy?

   • ATo eliminate the need for security monitoring
   • BTo ensure that a failure in one control does not leave the asset completely unprotected
   • CTo simplify security management by using a single vendor for all controls
   • DTo reduce the total cost of security by using fewer controls
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security manager is justifying a defense-in-depth strategy to the CFO. The CFO asks why the company should spend money on multiple overlapping security controls when a single strong firewall seems sufficient. Which response best explains the value of defense-in-depth?

   • ADefense-in-depth reduces the total cost of security by allowing the company to replace expensive controls with cheaper ones.
   • BDefense-in-depth eliminates the need for security monitoring because the layers automatically block all attacks.
   • CDefense-in-depth is required by all industry regulations, so the company must implement it to avoid fines.
   • DDefense-in-depth ensures that if one control fails or is bypassed, other layers still provide protection, increasing overall resilience.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security manager is evaluating the cost of a defense-in-depth strategy. The manager notes that the company has already invested in a strong perimeter firewall, but wants to add more layers. Which consideration is most important when deciding where to add the next control?

   • AAdd a control that is required by a specific regulation, even if it does not address a current risk.
   • BAdd the most expensive control available to demonstrate a strong security posture.
   • CAdd a control that is easiest to implement, regardless of its effectiveness.
   • DIdentify the most likely attack paths and the controls that would have the greatest impact on reducing risk.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A database administrator wants to protect sensitive data in a database that is accessed by multiple applications. The administrator is considering encryption, but is concerned about performance. Which approach best balances security and performance?

   • ADo not encrypt the database; rely on network encryption and access controls.
   • BEncrypt only the most sensitive columns in the database, such as credit card numbers and social security numbers.
   • CEncrypt the database backups only, not the live database.
   • DEncrypt the entire database with transparent data encryption.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's network has a perimeter firewall, but a recent breach showed that an attacker who compromised a single internal host was able to move laterally to the database server. The security team wants to add controls that specifically limit lateral movement while still allowing legitimate internal traffic. Which combination of controls best addresses this goal?

   • AAdd a second perimeter firewall in series with the existing one, configured with identical rules.
   • BDeploy an internal segmentation firewall and create VLANs or zones between departments, with access control lists restricting east-west traffic.
   • CInstall host-based intrusion detection software on every server and workstation to alert on suspicious activity.
   • DRequire all remote users to connect through a VPN that terminates at the perimeter firewall.
   Reveal Solution Discussion Select an answer first