Module 3 - Security Architecture

An organization is building a new backup data center with cost-benefit as the primary requirement and RTO and RPO values around two days. Which of the following types of sites is the best for this scenario?

• Real-time recovery
• Hot
• Cold
• Warm

A systems administrator is looking for a low-cost application-hosting solution that is cloud-based. Which of the following meets these requirements?

• Serverless framework
• Type 1 hypervisor
• SD-WAN
• SDN

A company is concerned about weather events causing damage to the server room and downtime. Which of the following should the company consider?

• Clustering servers
• Geographic dispersion
• Load balancers
• Off-site backups

An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?

• Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53 Access list outbound deny 10.50.10.25/32 0.0.0.0/0 port 53
• Access list outbound permit 0.0.0.0/0 10.50.10.25/32 port 53 Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53
• Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53 Access list outbound deny 0.0.0.0/0 10.50.10.25/32 port 53
• Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53 Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53

A company prevented direct access from the database administrators' workstations to the network segment that contains database servers. Which of the following should a database administrator use to access the database servers?

• Jump server
• RADIUS
• HSM
• Load balancer

An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?

• RDP server
• Jump server
• Proxy server
• Hypervisor

A company needs to provide administrative access to internal resources while minimizing the traffic allowed through the security boundary. Which of the following methods is most secure?

• Implementing a bastion host
• Deploying a perimeter network
• Installing a WAF
• Utilizing single sign-on

A hacker gained access to a system via a phishing attempt that was a direct result of a user clicking a suspicious link. The link laterally deployed ransomware, which laid dormant for multiple weeks, across the network. Which of the following would have mitigated the spread?

• IPS
• IDS
• WAF
• UAT

Which of the following roles, according to the shared responsibility model, is responsible for securing the company's database in an IaaS model for a cloud environment?

• Client
• Third-party vendor
• Cloud provider
• DBA

A company is developing a business continuity strategy and needs to determine how many staff members would be required to sustain the business in the case of a disruption. Which of the following best describes this step?

• Capacity planning
• Redundancy
• Geographic dispersion
• Tablet exercise