Fundamental Security Architecture Concepts GDSA Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   What is a trust boundary in a network architecture?

   • AA security policy that defines user roles and permissions
   • BA point where the level of trust changes as data flows from one zone to another
   • CA physical cable that connects two network segments
   • DA device that encrypts all traffic within a single zone
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company is adopting a reference architecture for its new cloud environment. The reference architecture includes a shared services VPC, a production VPC, and a development VPC. The security team is concerned about the risk of a compromised development instance being used to attack production. Which control, when implemented as part of the reference architecture, most directly mitigates this risk?

   • AUsing the same security group for both development and production instances to simplify management.
   • BDeploying a VPN between the development and production VPCs to encrypt traffic.
   • CConfiguring network ACLs and security groups to deny all traffic from the development VPC to the production VPC, except for specific approved paths.
   • DImplementing VPC peering between the development and production VPCs to allow easy access.
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   A company is implementing a new security architecture for its data center. The architecture includes a perimeter firewall, an internal firewall, host-based intrusion prevention, and application-level logging. The goal is to protect a critical application from both external and internal threats. Which statement best describes how these controls work together?

   • AThe controls are only effective against external threats, not internal ones.
   • BThe controls are redundant and only one is needed to protect the application.
   • CThe perimeter firewall is the primary control, and the other controls are optional.
   • DEach control provides a separate layer of defense, so that if one fails, others can still detect or block the threat.
   Reveal Solution Discussion Select an answer first