1.9 Describe Defense in Depth Strategy Such as Secure Architecture for Everyone (SAFE) 350-701 Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A company is implementing a SAFE-based architecture. They have a data center that hosts critical applications and a campus network for employees. The security team is deciding where to place specific controls. Which control-to-location mapping is most consistent with the SAFE model?

   • APlace a web application firewall (WAF) on the internal campus network to protect employee workstations.
   • BDeploy an intrusion prevention system (IPS) at the data center edge to inspect traffic destined for critical servers.
   • CImplement a firewall only at the internet edge and rely on it for all security needs.
   • DUse network access control (NAC) only at the data center server farm to authenticate servers.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A global company is designing a defense-in-depth strategy using SAFE. They have a campus in North America, a data center in Europe, and a cloud presence in Asia. The company must comply with data residency regulations that require customer data to remain in the region where it was collected. The security team needs to ensure that security controls are applied consistently across all regions while respecting data residency. Which approach best meets these requirements?

   • ABackhaul all traffic from Europe and Asia to the North American data center for security inspection.
   • BDeploy identical security controls in every region, but manage them independently to ensure local compliance.
   • CUse a single, global security policy and enforce it only at the internet edge of each region.
   • DDeploy regional security stacks (firewall, IPS) in each 'place in the network' (Campus, Data Center, Cloud) and use a centralized management platform to enforce consistent policies.
   Reveal Solution Discussion Select an answer first