4.3 - Understand Network Security Infrastructure CC Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A security architect is designing a defense in depth strategy for a new e-commerce platform. The architect has already implemented a web application firewall (WAF), network segmentation, and strong authentication. To add a layer that specifically detects and alerts on anomalous behavior within the internal network (east-west traffic), which control should the architect add?

   • ANetwork-based intrusion detection system (NIDS) placed on internal network segments.
   • BA second WAF placed on the internal network.
   • CA virtual private network (VPN) for all internal communications.
   • DA network access control (NAC) solution that blocks non-compliant devices.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which network segmentation type creates isolated zones to host services that are accessible from the internet while protecting the internal network?

   • ADMZ
   • BVPN
   • CMicro-segmentation
   • DVLAN
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary security benefit of network segmentation?

   • AIt limits the spread of an attack by isolating compromised segments
   • BIt increases network speed by reducing latency
   • CIt simplifies IP address management
   • DIt eliminates the need for firewalls
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A colocation data center is being audited for physical security. The auditor notes that the facility has a single HVAC system, a diesel generator, and a fire suppression system using clean agent gas. The data center hosts critical servers for a 24/7 emergency services dispatch center. Which physical infrastructure improvement should the auditor recommend as the highest priority?

   • AAdd a redundant (N+1) HVAC system to ensure cooling continues if the primary unit fails.
   • BReplace the clean agent gas system with a water-based sprinkler system.
   • CRemove the diesel generator to reduce the risk of fuel-related fires.
   • DInstall a single, larger HVAC unit to replace the existing one.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A startup is building a new customer-facing web application. They want to avoid managing the underlying operating system, runtime, and web server, but they still need to write and maintain the application code. They also want the cloud provider to handle patching of the infrastructure. Which cloud service model best fits this requirement?

   • AFunction as a Service (FaaS)
   • BPlatform as a Service (PaaS)
   • CSoftware as a Service (SaaS)
   • DInfrastructure as a Service (IaaS)
   Reveal Solution Discussion Select an answer first