1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which set of layers is commonly included in a defense-in-depth model?

   • AFirewall, IDS, VPN, and proxy
   • BPerimeter, core, edge, and cloud
   • CPhysical, network, host, application, and data
   • DPrevention, detection, response, and recovery
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company has a flat network with no internal segmentation. They want to implement segmentation to improve security, but the operations team is concerned that strict segmentation will break legacy applications that rely on direct network access. Which approach best addresses this conflict?

   • AImplement full segmentation immediately and require all applications to be updated to work with the new network.
   • BUse a single VLAN for all devices but add ACLs to restrict traffic between specific hosts.
   • CKeep the flat network and rely on host-based firewalls to protect critical assets.
   • DImplement segmentation gradually, starting with the most critical assets, and use monitoring to identify and resolve application issues.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   How does encryption contribute to a defense-in-depth strategy for data security?

   • AIt prevents unauthorized users from accessing the network
   • BIt ensures that data remains unreadable even if it is intercepted or stolen
   • CIt detects and blocks malware that tries to exfiltrate data
   • DIt eliminates the need for access controls on the data
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A small business is building a security strategy from scratch. The owner asks for a simple, single solution that will protect the network, servers, and data. Which response best reflects the defense-in-depth approach?

   • AAdvise the owner to use a cloud-based security service because it is always more secure than on-premises controls.
   • BExplain that security requires multiple layers of controls, such as a firewall, endpoint protection, access controls, and encryption, working together.
   • CSuggest that the business focus on employee training and ignore technical controls.
   • DRecommend purchasing a single, comprehensive security appliance that can handle all security needs.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A web application stores customer PII in a database. The development team wants to protect the data both at rest and in transit, and also ensure that only authorized users can access it. Which combination of controls best achieves defense-in-depth for application and data security?

   • AEncrypt the database with transparent data encryption, enforce TLS for all client connections, and implement role-based access control on the application.
   • BPlace the database behind a firewall and allow only the application server to connect to it.
   • CUse a web application firewall to filter incoming HTTP requests for SQL injection attempts.
   • DRequire strong passwords for all database users and change them every 90 days.
   Reveal Solution Discussion Select an answer first