NSE Security Architecture & Design 4

Question 1

What is the primary function of a Security Operations Center (SOC) in a mature security architecture?

Accepted Answer

Continuous monitoring, detection, and response to security events

Answer

A SOC provides 24/7 monitoring and response capabilities using SIEM and other tools to detect and remediate threats in real time.

Question 2

An architect needs to verify the integrity of firmware on network devices. Which security control directly addresses this requirement?

Accepted Answer

Secure boot with cryptographic signature verification

Answer

Secure boot ensures firmware is cryptographically signed and validated before execution, preventing tampered firmware from loading.

Question 3

In the context of cloud security architecture, what does the 'shared responsibility model' define?

Accepted Answer

Which security controls are the cloud provider's responsibility versus the customer's

Answer

The shared responsibility model delineates which security duties (e.g., physical infrastructure vs. data, OS, applications) belong to the CSP versus the customer.

Question 4

Which protocol is used by FortiGate to synchronize session tables between HA cluster members?

Accepted Answer

FGSP (FortiGate Session Life Support Protocol)

Answer

FGSP allows FortiGate peers to synchronize session tables so failover is stateful and connections are not dropped.

Question 5

A security architect must protect against insider threats accessing sensitive databases. Which control is most effective at the database layer?

Accepted Answer

Database Activity Monitoring (DAM) with privileged user controls

Answer

DAM monitors and alerts on suspicious database queries, including those from privileged insiders, providing audit trails and anomaly detection.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Security Architecture & Design 4