Defense in Depth GSEC Practice Questions (Page 11)

Questions 51–55

1. 51expert · hard

   A financial institution is designing a new data center. It must comply with regulations that require physical access controls, data encryption, and strict change management. The institution also wants to minimize the risk of insider threats. Which design best addresses these requirements?

   • AImplement a robust change management process and use audit logging for all administrative actions.
   • BUse a single-factor badge system for physical access and rely on background checks for employees.
   • CEncrypt data at rest and in transit, but allow all employees physical access to the server room.
   • DImplement multi-factor physical access control (badge + biometric), encrypt all data at rest, and enforce separation of duties for system administrators.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company's laptops are used by employees who travel frequently. The security team wants to protect the data on the laptops in case they are lost or stolen. Which control is the most effective?

   • AUse a laptop lock to physically secure the laptop when unattended.
   • BInstall a tracking software that can remotely wipe the laptop.
   • CEnable full disk encryption on all laptops.
   • DRequire a strong BIOS password to prevent unauthorized booting.
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A healthcare organization is deploying a new patient portal. The portal will be accessible from the internet and will handle sensitive health data. The organization has a limited budget and must balance security with usability. Which set of controls provides the most appropriate defense in depth?

   • AUse only HTTPS and rely on the hosting provider's security.
   • BUse a web application firewall, enforce HTTPS, implement strong authentication, and conduct regular vulnerability scans.
   • CDeploy a next-generation firewall, an IDS, and a SIEM, and require a VPN for all users.
   • DImplement a data loss prevention solution and require multi-factor authentication for all users.
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A company is implementing a data loss prevention (DLP) strategy. The goal is to prevent sensitive data from leaving the network via email. Which control is the most effective?

   • AEncrypt all outbound email using S/MIME.
   • BImplement a policy that prohibits sending sensitive data via email.
   • CUse a network firewall to block outbound email traffic.
   • DDeploy a DLP solution that scans outbound email for sensitive data patterns and blocks or quarantines messages.
   Reveal Solution Discussion Select an answer first
6. 55expert · hard

   A web application development team is concerned about SQL injection attacks. They have already implemented parameterized queries, but they want to add an additional layer of defense. Which control would be the most effective complementary measure?

   • ARequire multi-factor authentication for all application users.
   • BDeploy a web application firewall (WAF) with rules to detect and block SQL injection patterns.
   • CEncrypt all data in the database using transparent data encryption.
   • DUse a network firewall to restrict access to the database server to only the application server.
   Reveal Solution Discussion Select an answer first