SY0-601 Architecture & Design

Question 1

What is defense in depth?

Accepted Answer

Layered security

Answer

Defense in depth is a cybersecurity strategy that employs multiple layers of security controls to protect information and systems. Instead of relying on a single point of defense, it creates redundancy, meaning if one security measure fails, others are in place to prevent a breach. This layered approach significantly enhances overall security posture by making it harder for attackers to penetrate a system.

Question 2

What is segmentation?

Accepted Answer

Network separation

Answer

Segmentation in network design involves dividing a computer network into smaller, isolated subnetworks or segments. This separation helps to contain security breaches by limiting the lateral movement of attackers within the network. If one segment is compromised, the damage is confined, preventing the entire network from being affected and enhancing overall security.

Question 3

Why use secure baseline configuration?

Accepted Answer

Consistency and security

Answer

Using a secure baseline configuration ensures consistency and security across all systems within an organization. It establishes a minimum security standard, defining secure settings, installed software, and disabled services. This practice reduces the attack surface, minimizes misconfigurations, and ensures that all systems adhere to a known, secure state, making them less vulnerable to threats.

Question 4

What is DMZ in network design?

Accepted Answer

Isolated network zone

Answer

A DMZ (Demilitarized Zone) in network design is an isolated network zone that acts as a buffer between an organization's internal network and an untrusted external network, like the internet. It hosts public-facing services such as web servers or email servers, protecting the internal network from direct attacks. If a DMZ server is compromised, the attacker still cannot directly access the more sensitive internal systems.

Question 5

What does VPN do?

Accepted Answer

Secure remote connection

Answer

A VPN (Virtual Private Network) creates a secure, encrypted connection over a less secure network, such as the internet. Its primary function is to provide secure remote access to private networks, allowing users to send and receive data as if their computing devices were directly connected to the private network. This ensures data confidentiality and integrity, especially when working remotely or using public Wi-Fi.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Architecture & Design