NSE Security Architecture & Design 5

Question 1

Which security design pattern places a reverse proxy in front of web applications to inspect and filter HTTP/S traffic before it reaches backend servers?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF sits in front of web servers and inspects HTTP/S requests, blocking OWASP Top 10 attacks like SQL injection and XSS.

Question 2

An enterprise architect wants to ensure business continuity if the primary data center fails. What is the recommended RTO-focused design?

Accepted Answer

Hot standby site with real-time synchronization and automated failover

Answer

A hot standby with real-time sync and automated failover minimizes Recovery Time Objective (RTO) to near-zero.

Question 3

Which Fortinet feature enables automatic threat intelligence sharing between Security Fabric components without manual administrator intervention?

Accepted Answer

FortiGuard IOC sync via Security Fabric

Answer

The Security Fabric automatically propagates FortiGuard threat intelligence (IOCs) across connected Fabric devices in real time.

Question 4

A penetration test reveals that a company's VPN allows split tunneling. What is the primary security concern?

Accepted Answer

Corporate traffic bypasses security controls when routed through the internet

Answer

With split tunneling, traffic destined for non-corporate sites bypasses the corporate firewall, potentially introducing threats into the environment.

Question 5

In secure architecture design, what is the role of a Hardware Security Module (HSM)?

Accepted Answer

Providing tamper-resistant storage and management of cryptographic keys

Answer

An HSM is a dedicated hardware device that securely generates, stores, and manages cryptographic keys in a tamper-evident environment.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Security Architecture & Design 5