4.3 - Understand Network Security Infrastructure CC Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A company is implementing micro-segmentation in its data center. The security team wants to ensure that the web application tier can only communicate with the database tier on port 3306, and that no other traffic is allowed between these tiers. Which technology is best suited to enforce this policy?

   • AA virtual private network (VPN) that encrypts traffic between the web and database tiers.
   • BA software-defined network (SDN) with distributed firewall policies applied to each virtual machine.
   • CA network access control (NAC) solution that authenticates devices before they join the network.
   • DA traditional perimeter firewall placed at the edge of the data center.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an on-premises data center, which physical infrastructure component provides continued operation during a brief utility power failure?

   • AHVAC system
   • BNetwork access control (NAC) appliance
   • CFire suppression system
   • DUninterruptible power supply (UPS)
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security strategy relies on multiple layers of controls so that if one layer fails, others still provide protection?

   • ANetwork segmentation
   • BRisk assessment
   • CLeast privilege
   • DDefense in depth
   Reveal Solution Discussion Select an answer first
5. 9expert · medium

   A company is outsourcing its network monitoring to a managed security service provider (MSSP). The MSSP will monitor the company's firewalls and IDS/IPS systems. The company wants to ensure that the MSSP is contractually obligated to respond to alerts within 15 minutes and to provide a monthly report on security incidents. Which document should include these specific requirements?

   • AService-Level Agreement (SLA)
   • BMemorandum of Understanding (MOU)
   • CBusiness Continuity Plan (BCP)
   • DAcceptable Use Policy (AUP)
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A retail company is implementing a defense in depth strategy for its payment processing network. The security team has already deployed a firewall and an intrusion detection system (IDS). To add another layer of protection specifically focused on detecting and stopping malicious traffic before it reaches the internal servers, which control should they add next?

   • AA second firewall configured identically to the first.
   • BA virtual private network (VPN) for all internal communications.
   • CAn intrusion prevention system (IPS) placed inline between the firewall and the internal network.
   • DA network tap that copies all traffic to a log server for analysis.
   Reveal Solution Discussion Select an answer first