Secure Network Design Principles

What does the principle of fail-safe defaults imply in secure network design?

• Systems should remain operational even after a failure

• Access should be denied by default unless explicitly allowed

• All systems should have default passwords

• Default configurations should be publicly documented

Which design principle involves using multiple layers of security controls throughout the network?

• Defense in Depth

• Single Point of Failure

• Open Network Architecture

• Security Through Obscurity

What is the main purpose of implementing redundancy in network design?

• To improve network performance

• To enhance security through multiple layers

• To ensure network reliability and uptime

• To reduce network costs

What is the purpose of network segmentation in secure network design?

• To increase network speed

• To limit the spread of attacks

• To simplify network management

• To reduce hardware costs

Which principle ensures that a network remains operational and accessible even if part of it fails?

• Confidentiality

• Integrity

• Availability

• Scalability

In secure network design, what is the purpose of using a demilitarized zone (DMZ)?

• To create a buffer zone between the internal network and external networks

• To segment the network for performance improvement

• To provide wireless network access

• To monitor and log all network traffic

Which principle involves regularly updating and patching network devices and software?

• Continuous Monitoring

• Patch Management

• Change Control

• Incident Response

What is a key benefit of using a proxy server in network design?

• It increases the speed of network connections

• It enhances security by filtering incoming and outgoing traffic

• It reduces the cost of network hardware

• It allows for anonymous browsing only

Which of the following best describes the principle of least privilege?

• Giving users access to only the resources they need to perform their tasks

• Allowing all users access to all resources at all times

• Restricting network access to certain hours of the day

• Limiting the number of users on the network

Which of the following is a common practice to ensure secure remote access to a network?

• Using unsecured Wi-Fi connections

• Allowing access from any device without restrictions

• Implementing Virtual Private Networks (VPNs)

• Disabling encryption for faster access