Defense in Depth GSEC Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which statement best describes the defense-in-depth security principle?

   • AImplementing multiple, overlapping security controls across different layers
   • BPlacing all security controls at the network perimeter
   • CRelying on encryption as the sole security measure
   • DUsing a single, strong security control to protect all assets
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which of the following is an example of a physical security control?

   • AA firewall rule that blocks inbound traffic on port 23
   • BA data loss prevention (DLP) system that monitors email
   • CA biometric scanner that controls access to a server room
   • DAn antivirus program that scans files for malware
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A hospital network stores patient records in a database that must be accessible to clinicians on the internal network. The security team wants to protect the database from both external attackers and internal threats, while ensuring that clinicians can still reach it. Which combination of controls best implements defense in depth for this database?

   • AApply database-level access controls and enable audit logging, but leave the database on the general network.
   • BEncrypt the database files and back up the encryption keys on the same server for recovery.
   • CPlace the database in a separate VLAN with a firewall rule allowing only the clinical subnet, and encrypt the database files at rest.
   • DInstall a host-based firewall on the database server and rely on the existing perimeter firewall for external protection.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A security analyst is reviewing the defense-in-depth posture of a company. The company has a firewall, an IDS, antivirus on all endpoints, and a patch management program. During a recent incident, an attacker was able to move laterally from a compromised workstation to a file server. Which control is most likely to have prevented this lateral movement?

   • AAntivirus software that detects the malware on the workstation.
   • BAn intrusion detection system that alerts on suspicious SMB traffic.
   • CA patch management program that ensures the file server is up to date.
   • DNetwork segmentation with firewall rules that restrict communication between the workstation and file server subnets.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A company has a high rate of employees sharing passwords and writing them down. The security team wants to reduce the risk of credential theft and unauthorized access. Which approach is most effective?

   • AConduct a security awareness campaign about password hygiene.
   • BImplement single sign-on (SSO) with multi-factor authentication (MFA) and provide a password manager for employees.
   • CEnforce a complex password policy and require password changes every 30 days.
   • DUse biometric authentication for all systems and eliminate passwords entirely.
   Reveal Solution Discussion Select an answer first