Network Security Architecture GSLC Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the primary purpose of network segmentation in a security architecture?

   • ATo increase the speed of network traffic between all devices
   • BTo eliminate the need for firewalls within the internal network
   • CTo allow all internal hosts to communicate freely without restrictions
   • DTo isolate sensitive systems and control traffic flows between different trust levels
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A security operations center (SOC) is overwhelmed with alerts from multiple monitoring tools. They want to reduce alert fatigue while ensuring that critical incidents are not missed. Which strategy is most effective?

   • ADisable alerts from less critical sources and focus only on firewall logs.
   • BIncrease the threshold for all alerts so that only high-severity alerts are generated.
   • CImplement a SIEM to aggregate logs and use correlation rules to reduce false positives and prioritize alerts.
   • DHire more analysts to manually review all alerts.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A hospital is redesigning its network to separate the electronic health record (EHR) system from the general user LAN. The EHR must be reachable only by a small group of administrators and the clinical application server. The network team wants to enforce this with a firewall that inspects traffic between the zones. Which design best meets the requirement?

   • APlace the EHR on the same VLAN as the clinical application server and rely on host-based firewalls to restrict access.
   • BPut the EHR in the DMZ with a public IP so it can be accessed securely from anywhere.
   • CUse a single flat network and implement access control lists on the switch to restrict EHR access.
   • DPlace the EHR in a dedicated VLAN with a firewall rule that permits only the admin subnet and the application server to reach it.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A multinational corporation is designing a network for a new research facility. The facility handles intellectual property that must be protected from both external attackers and internal employees in other departments. The security team wants to enforce least-privilege access while maintaining usability for researchers. Which approach best balances these requirements?

   • AUse micro-segmentation to isolate each researcher's workstation from all others.
   • BCreate separate VLANs for each research team and use a firewall to allow only necessary traffic between them.
   • CPlace all researchers on a single flat network and rely on file permissions to protect data.
   • DConnect all research systems to the internet and use a cloud-based access control service.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A security analyst is investigating a potential data exfiltration incident. They need to determine which internal hosts communicated with a known malicious external IP address over the past 30 days. Which data source would be most useful for this investigation?

   • AAuthentication logs from the domain controller showing successful logons.
   • BDNS logs that show which internal hosts resolved the malicious domain name.
   • CFirewall logs that record source and destination IP addresses, ports, and timestamps for all allowed and denied traffic.
   • DEndpoint antivirus logs that show malware detections.
   Reveal Solution Discussion Select an answer first