1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software company is developing a new application that will store customer data. The security team wants to ensure that even if a developer makes a mistake in the code, the data is still protected. Which application and data security controls should be implemented?

   • APerform regular code reviews and use a static analysis tool to find bugs.
   • BDeploy the application on a dedicated server and keep it patched.
   • CRequire all developers to use strong passwords and change them every 90 days.
   • DUse parameterized queries to prevent SQL injection, encrypt the database, and enforce least-privilege access to the data.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security team is reviewing an incident where an attacker was able to move laterally across the network despite the presence of a firewall and an IDS. The team wants to improve the defense-in-depth posture. Which change would most directly address the gap that allowed lateral movement?

   • ADisable all unnecessary services on the servers.
   • BImplement network segmentation with strict ACLs between internal zones.
   • CIncrease the sensitivity of the IDS to generate more alerts.
   • DDeploy a second firewall in parallel with the existing one for redundancy.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company is deploying a new server that will host a critical application. The security team wants to ensure that the server is protected even if the network firewall is bypassed. Which host-based controls should be implemented?

   • AUse a strong administrator password and disable the guest account.
   • BEnable the host-based firewall, install endpoint protection, and configure the operating system to automatically install security patches.
   • CEncrypt the hard drive and require a PIN at boot.
   • DPlace the server in a DMZ and configure the network firewall to allow only necessary traffic.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the role of network segmentation in a defense-in-depth strategy?

   • AIt limits the ability of an attacker to move laterally within the network
   • BIt provides encryption for all data transmitted across the network
   • CIt detects and blocks malicious traffic in real time
   • DIt eliminates the need for firewalls by isolating all systems
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   How do different layers of security controls work together in a defense-in-depth approach?

   • AThey are only effective when all layers are from the same vendor
   • BThey replace the need for user training and awareness programs
   • CEach layer operates independently and does not share information with other layers
   • DThey provide overlapping protection so that a threat must bypass multiple controls to reach the asset
   Reveal Solution Discussion Select an answer first