CCP Defense-in-Depth Architecture 3

Question 1

Which defense-in-depth strategy assumes that internal users and systems may be compromised and enforces strict verification for every access request?

Accepted Answer

Zero Trust Architecture

Answer

Zero Trust Architecture applies 'never trust, always verify' principles, treating internal traffic with the same scrutiny as external traffic.

Question 2

An organization uses data classification, DLP tools, and encryption to protect sensitive files. Which defense-in-depth layer is being addressed?

Accepted Answer

Data layer

Answer

Data layer controls protect information itself through classification, encryption, and loss prevention regardless of the transport path.

Question 3

A security team deploys honeypots throughout the internal network. What defense-in-depth benefit do honeypots primarily provide?

Accepted Answer

Detect lateral movement and gather attacker intelligence

Answer

Honeypots lure attackers into fake systems, exposing lateral movement and providing intelligence about attacker tactics without risking real assets.

Question 4

Which principle ensures that if one security control is defeated, another independent control still protects the asset?

Accepted Answer

Redundancy of controls

Answer

Redundancy of controls is the core defense-in-depth principle where multiple independent safeguards protect assets even when one fails.

Question 5

In a layered security architecture, what is the purpose of a bastion host?

Accepted Answer

Serve as a hardened gateway for administrative access to internal networks

Answer

A bastion host is a specially hardened server that provides a secure and monitored entry point for administrative access, reducing the internal attack surface.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP Defense-in-Depth Architecture 3