NSE Security Architecture & Design 2

Question 1

Which security architecture principle ensures that a compromised component cannot expose the entire system by limiting access between internal zones?

Accepted Answer

Segmentation

Answer

Segmentation isolates network zones so a breach in one segment cannot directly propagate to others.

Question 2

In a Fortinet Security Fabric deployment, what is the primary role of FortiAnalyzer?

Accepted Answer

Centralized log management and analytics

Answer

FortiAnalyzer aggregates logs from Fabric devices and provides centralized analytics and reporting.

Question 3

A security architect wants to enforce consistent policy across cloud and on-premises environments. Which Fortinet solution provides this unified management?

Accepted Answer

FortiManager

Answer

FortiManager provides centralized configuration and policy management across physical and virtual FortiGate deployments.

Question 4

Which encryption approach is most appropriate when an organization needs to protect data confidentiality without the ability to inspect encrypted traffic for threats?

Accepted Answer

End-to-end encryption

Answer

End-to-end encryption protects data from sender to recipient, but prevents intermediary inspection for threats.

Question 5

What does a 'trust but verify' model differ from a Zero Trust model in practical network design?

Accepted Answer

Trust but verify grants implicit internal network trust; Zero Trust requires continuous verification

Answer

Traditional 'trust but verify' implicitly trusts internal users, whereas Zero Trust continuously validates every access request regardless of location.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Security Architecture & Design 2