1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a common limitation of a defense-in-depth strategy?

   • AIt increases complexity and cost due to the need to manage multiple controls
   • BIt reduces the overall security posture by adding too many controls
   • CIt makes the network slower by encrypting all traffic
   • DIt requires all controls to be from the same vendor to work together
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security manager is considering a defense-in-depth strategy for a mid-sized company. The manager is concerned about the operational burden of managing many security tools. Which statement best describes a realistic limitation of defense-in-depth?

   • ADefense-in-depth is only effective if the company uses products from a single vendor.
   • BDefense-in-depth guarantees that no attack will ever succeed.
   • CDefense-in-depth increases complexity and requires ongoing management of multiple controls, which can be costly and resource-intensive.
   • DDefense-in-depth is only applicable to large enterprises with dedicated security teams.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security architect is designing a defense-in-depth strategy for a company that has a mix of on-premises and cloud workloads. The company wants to ensure consistent security across both environments. Which approach best applies defense-in-depth across the hybrid environment?

   • AApply the same layered controls (network, host, application, data) in both environments, using cloud-native equivalents where appropriate.
   • BFocus all security controls on the on-premises environment because the cloud provider is responsible for security.
   • CImplement defense-in-depth only for the cloud workloads because they are more exposed to the internet.
   • DUse a single security appliance that can inspect traffic for both on-premises and cloud workloads.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which set of practices is an example of applying defense-in-depth to application and data security?

   • AEndpoint protection, patch management, and host-based firewalls
   • BFirewalls, IDS/IPS, and VPN
   • CLocks, guards, and biometric scanners
   • DSecure coding, encryption, and access controls
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is diversity an important principle in defense-in-depth?

   • AIt simplifies the process of training security staff
   • BIt allows the organization to use only open-source security tools
   • CIt ensures that all security controls are identical for easier management
   • DIt reduces the likelihood that a single vulnerability will affect all layers
   Reveal Solution Discussion Select an answer first