6.4 - Manage Network Security SSCP Practice Questions (Page 5)

Questions 21–24

1. 21expert · hard

   A security administrator is designing a network for a hospital. The network must comply with regulations that require patient data to be isolated from general network traffic. The hospital also needs to allow remote doctors to access the patient data system securely. Which design should be implemented?

   • AUse a single firewall zone for all systems, and configure ACLs to allow all traffic.
   • BPlace patient data systems on the same VLAN as the general network, and rely on encryption to protect the data.
   • CUse physical segmentation by placing patient data systems on a separate physical network, but do not provide remote access.
   • DCreate a dedicated VLAN for patient data systems, place a firewall between that VLAN and the rest of the network, and require VPN access for remote doctors.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does separating the control plane from the data plane enhance network security?

   • AIt allows the data plane to make routing decisions
   • BIt prevents all denial-of-service attacks
   • CIt eliminates the need for encryption
   • DIt ensures that a compromise of the data plane cannot affect the control plane
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In which environment is micro-segmentation MOST commonly implemented?

   • ACellular networks
   • BData centers and cloud environments
   • CLegacy mainframe networks
   • DSmall home networks
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company wants to segment its network to reduce the impact of a malware infection. The company has multiple departments, but the security team wants to minimize the number of VLANs to reduce administrative overhead. Which segmentation approach should be used?

   • AUse a single VLAN for all departments and rely on host-based firewalls.
   • BUse physical segmentation by deploying a separate switch for each department.
   • CCreate a separate VLAN for every department, regardless of security requirements.
   • DGroup departments with similar security requirements into the same VLAN, and use ACLs to control inter-VLAN traffic.
   Reveal Solution Discussion Select an answer first