General Security Design and Considerations JN0-1103 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare organization must comply with regulations that require protecting patient data both at rest and in transit. Which set of controls should be included in the security design?

   • ADeploy firewalls and intrusion prevention systems
   • BEncrypt databases and use VPNs for remote access
   • CImplement strong password policies and MFA
   • DUse role-based access control and audit logs
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   After a user is authenticated, the network determines whether that user is permitted to access a specific file server. Which access control component is responsible for this decision?

   • AAuthentication
   • BEncryption
   • CAccounting
   • DAuthorization
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is designing a network for a new office. The security team wants to ensure that a compromised workstation in the general user LAN cannot directly reach the finance department's servers. Which two design elements should be combined to achieve this goal?

   • APlace finance servers in a separate VLAN and apply firewall rules between VLANs.
   • BUse strong passwords on all user accounts and enable multi-factor authentication.
   • CInstall antivirus software on all workstations and servers.
   • DEncrypt all traffic between users and finance servers using IPsec.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is redesigning its network to improve security. The current network is flat, and all users can reach all servers. The security team wants to implement least privilege and segmentation, but the operations team is concerned that strict segmentation will break existing workflows. Which approach best balances security and operational continuity?

   • AKeep the flat network and rely on host-based firewalls on each server.
   • BImplement micro-segmentation with a firewall that allows traffic based on application identity and user role.
   • CSegment all servers into separate zones and deny all traffic between them.
   • DUse a single firewall rule to allow all traffic between users and servers.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A financial institution is required to implement specific security controls to protect cardholder data as mandated by the Payment Card Industry Data Security Standard (PCI DSS). How does this compliance requirement influence the security design?

   • AIt requires the implementation of specific security controls to protect cardholder data.
   • BIt only applies to cloud-based systems.
   • CIt mandates the use of a specific firewall vendor.
   • DIt eliminates the need for network segmentation.
   Reveal Solution Discussion Select an answer first