2.4 Evaluate the Security Controls of an Environment, Diagnose Gaps, and Recommend Improvement 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's security team is reviewing their network segmentation controls. They find that the firewall rule set allows any host in the DMZ to initiate connections to any host in the internal database subnet on TCP 1433. The stated security policy requires that only the application server subnet can reach the database subnet. Which action best addresses the identified gap?

   • ACreate a new VLAN for the database subnet and move the database servers.
   • BModify the firewall rules to restrict source addresses to the application server subnet.
   • CIncrease logging on the firewall to capture all traffic to the database subnet.
   • DAdd an intrusion prevention system (IPS) in front of the database subnet to monitor for malicious traffic.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team is comparing their organization's access control policy to the principle of least privilege. They find that many users have domain administrator rights that are not required for their job functions. What is the most appropriate recommendation to close this gap?

   • ARemove unnecessary administrative rights and implement role-based access control (RBAC).
   • BIncrease password complexity requirements for all users.
   • CDeploy a data loss prevention (DLP) solution.
   • DEnable audit logging for all user activity.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   During a security control evaluation, a security analyst reviews the configuration of a firewall and compares it against the organization's security policy. Which activity is the analyst performing?

   • AConducting a penetration test to exploit the firewall's weaknesses
   • BReviewing firewall logs to detect unauthorized access attempts
   • CPerforming a vulnerability scan to identify missing patches on the firewall
   • DAssessing the effectiveness of the control by verifying its configuration aligns with the policy
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is assessing its security posture against the NIST Cybersecurity Framework. The assessment shows that the company has strong detection controls but weak response capabilities. Which recommendation best addresses the identified gap?

   • ADeploy additional intrusion detection sensors
   • BConduct a vulnerability assessment
   • CDevelop and test an incident response plan
   • DIncrease logging and monitoring
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization is required to comply with PCI DSS, which mandates that cardholder data be encrypted. The organization currently encrypts data in transit but not data at rest. The security team is evaluating whether to implement full-disk encryption on all servers or to encrypt only the databases that store cardholder data. The organization has limited budget and the servers are used for multiple purposes. What is the most appropriate recommendation?

   • AEncrypt only the databases that store cardholder data.
   • BDefer encryption until the next audit.
   • CEncrypt data in transit only.
   • DImplement full-disk encryption on all servers.
   Reveal Solution Discussion Select an answer first