Managing Network Security GSLC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A large enterprise is considering adopting software-defined networking (SDN) to improve agility. The security team is concerned about the centralized SDN controller becoming a single point of failure and a high-value target. The team must design a secure SDN architecture. Which approach best addresses these concerns?

   • AUse a single SDN controller but place it behind a firewall to protect it from external threats.
   • BUse SDN only in the data center and keep the rest of the network traditional.
   • CDeploy multiple redundant SDN controllers in different data centers and secure the control plane communications with encryption and strong authentication.
   • DAvoid SDN and continue using traditional networking to eliminate the risk.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a key element of an effective network security policy?

   • AA guarantee of 100% security
   • BA list of all employee passwords
   • CA single static document that never changes
   • DClear enforcement and review procedures
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is evaluating software-defined networking (SDN) to improve network agility. The security team is concerned about the security implications of centralizing network control. Which security consideration is most important when implementing SDN?

   • ADeploy an intrusion detection system to monitor SDN traffic.
   • BProtect the SDN controller from compromise because it has centralized control over the entire network.
   • CEnsure that all network switches support the same SDN protocol.
   • DUse a separate management network for SDN traffic.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company has just experienced a ransomware attack that encrypted files on several file servers. The incident response team needs to contain the attack and begin recovery. Which action should be taken first to prevent further spread?

   • ARun a full antivirus scan on all servers to detect the ransomware.
   • BNotify law enforcement before taking any action.
   • CDisconnect the infected file servers from the network to stop the ransomware from spreading to other systems.
   • DImmediately restore all files from backup without isolating the infected systems.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is designing a secure network architecture for a new data center. The architecture must ensure that if one security control fails, other controls still provide protection. Which principle does this architecture primarily demonstrate?

   • AAvailability, which ensures that systems are accessible when needed.
   • BConfidentiality, which ensures that data is only accessible to authorized users.
   • CLeast privilege, which grants users only the permissions they need.
   • DDefense-in-depth, which uses multiple layers of security controls to protect assets.
   Reveal Solution Discussion Select an answer first