What is the BEST way to secure wireless IoT devices?
Network segmentation isolates IoT devices from critical systems, limiting the potential impact of compromised devices.
Which of the following penetration testing teams is focused only on trying to compromise an organization using an attacker's tactics?
A red team simulates the tactics of an attacker to identify vulnerabilities in an organization.
A company evaluates several options that would allow employees to have remote access to the network. The security team wants to ensure the solution includes AAA to comply with internal security policies. Which of the following should the security team recommend?
IPSec with RADIUS is the best option because RADIUS is designed to provide Authentication, Authorization, and Accounting (AAA) services for network access. When combined with IPSec, it allows for secure remote connections that comply with internal security policies requiring AAA.
Which of the following would be best suited for handling microservices?
Containers are lightweight, standalone packages that include everything needed to run an application, making them ideal for microservices. They provide isolation, portability, and efficiency, well-suited for deploying and managing individual microservices independently.
An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?
The correct ACL allows DNS traffic only from the IP address 10.50.10.25 and denies it from all other devices.
An organization is experiencing a security incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Select two)
Network logs reveal communication between the infected host and the command-and-control server, while firewall logs help track outbound connections to detect compromised hosts.
Which of the following is the MOST effective control against DDoS attacks?
Content Delivery Networks (CDNs) provide distributed infrastructure that can absorb and mitigate DDoS attacks effectively.
A security consultant is working with a client that wants to physically isolate its secure systems. Which of the following best describes this requirement?
Air-gapping involves physically isolating systems from others, preventing any direct network connectivity for extra security.
A university uses two different cloud solutions for storing student data. Which of the following does this scenario represent?
Platform diversity involves using multiple cloud providers to host similar services, reducing reliance on a single vendor. This approach enhances resilience and can mitigate risks associated with provider outages or vendor-specific vulnerabilities.
Which of the following would best allow a company to prevent access to systems from the internet?
An air-gapped network is physically isolated from any external network, including the internet, ensuring no remote access is possible. This extreme isolation eliminates the attack surface exposed to external threat actors. While it can complicate data transfer and management, it’s the most foolproof way to protect critical systems from internet-based attacks.
A Chief Security Officer signs off on a request to allow inbound SMB and RDP from the internet to a single VLAN. Which of the following is the most likely explanation for this activity?
Setting up a honeynet involves intentionally exposing services like SMB and RDP in a controlled network segment to lure attackers. This allows the security team to monitor attacker behavior and gather threat intelligence.
A university employee logged on to the academic server and attempted to guess the system administrators’ log-in credentials. Which of the following security measures would best detect the employee's attempts to gain access to the administrators’ accounts?
User activity logs help track and monitor login attempts, including failed ones, which would detect unauthorized access attempts.
A systems administrator successfully configures VPN access to a cloud environment. Which of the following capabilities should the administrator use to best facilitate remote administration?
A jump host in the shared services security zone facilitates secure remote administration by acting as an intermediary server, providing access to other systems.
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?
Virtualization allows multiple virtual machines to run on a single physical server, reducing the need for more physical hardware.
A network administrator wants to ensure that network traffic is highly secure while in transit. Which of the following actions best describes the actions the network administrator should take?
Selecting only TLS and other encrypted protocols ensures confidentiality and integrity during transit. Permitting only secure protocols blocks unencrypted or insecure traffic.
Quiz Complete!
Domain 3: Security Architecture