Security + (SY0-601) Domain 3--Architecture & Design

Using a combination of firewalls, intrusion detection systems, content filters, encryption, and auditing procedures in the organization for protection against intrusions is an example of which of the following?

• Defense in depth

• Infrastructure as a Service

• Community cloud

• Layered security

Which of the following types of control is a surveillance system?

• logical control

• technical control

• physical control

• management control

Which of the following are the most compelling reasons that secure configuration baselines have been established? (Select 3 answers.)

• industry standards

• organization requests

• governmental mandates

• regulatory bodies

Which of the following devices is used to accept encrypted connections from users and then send the connection to the server unencrypted?

• VPN

• DMZ

• DDoS mitigation appliance

• SSL accelerators

You are setting up a switched network and want to group users by department. Which technology should you implement?

• DMZ

• VPN

• VLAN

• NAT

An organization has a sensitive network that needs to have physically isolated machines. Which of the following practices would be used to meet this requirement?

• air gap

• VLAN

• RAS

• honeynet

An organization is experiencing a large amount of electromagnetic interference (EMI). Which of the following is the best method to provide continuous operations?

• extra shielding

• A generator

• A redundant electric connection

• A RAID configuration

Which of the following best describes the result of adding an email address to the blocked list?

• It is considered part of the whitelist

• It is considered part of the blacklist

• It is considered part of the graylist

• It is considered part of the brownlist

Which of the following can result in the exploitation of a BIOS vulnerability? (Select all 2 answers.)

• Hard drive failure occurs

• System cannot boot up

• System locks up

• Denial of service occurs

Which of the following uses a secure cryptoprocessor to authentic hardware devices such as a PC or laptop?

• Public key infrastructure

• Full disk encryption

• File-level encryption

• Trusted platform module