1.5 Describe the Principles of the Defense-In-Depth Strategy 200-201 Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Why is patch management an important part of host security in a defense-in-depth strategy?

   • AIt prevents all malware infections by blocking malicious websites
   • BIt encrypts all data stored on the host to protect against data theft
   • CIt monitors network traffic to detect intrusions on the host
   • DIt ensures that known software vulnerabilities are fixed, reducing the attack surface of the host
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company is implementing a new endpoint detection and response (EDR) solution. The security team wants to ensure that the EDR does not become a single point of failure in the host security strategy. Which additional control is most important to complement the EDR?

   • ADisable the EDR agent on high-performance servers to avoid performance impact.
   • BMaintain a robust patch management program to reduce the number of vulnerabilities that EDR must detect.
   • CRely solely on the EDR for all host security and do not implement other controls.
   • DUse the EDR's built-in firewall and disable the host-based firewall to avoid conflicts.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is a primary benefit of using a defense-in-depth strategy?

   • AIt guarantees that no security breach will ever occur
   • BIt eliminates the need for security monitoring and incident response
   • CIt increases the resilience of the organization by providing multiple layers of protection
   • DIt reduces the total cost of security by using fewer controls
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   An organization has a mix of Windows and Linux servers. They want to ensure that a compromised server cannot easily infect other servers on the same subnet. Which host-level control is most effective for this goal?

   • AEnable host-based firewalls on each server and configure rules to allow only necessary traffic.
   • BUse a centralized logging solution to monitor server activity.
   • CInstall antivirus software on each server and keep signatures up to date.
   • DApply the latest security patches to all servers on a monthly basis.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which principle is a key part of defense-in-depth?

   • ARelying on a single, comprehensive control to address all threats
   • BEnsuring that no single control is sufficient to protect an asset
   • CPlacing all controls at the outermost perimeter to stop threats before they enter
   • DUsing the same type of control at every layer to ensure consistency
   Reveal Solution Discussion Select an answer first