What is the main idea behind the Defense in Depth strategy?

• Encrypting data at rest only

• Using antivirus as the only defense

• Creating multiple layers of security

• Outsourcing security to third-party providers

Which of the following is NOT a type of control used in Defense in Depth?

• Physical Control

• Mental Control

• Technical Control

• Administrative Control

Which of the following is an example of a technical control in Defense in Depth?

• Lock on a server room door

• Employee awareness training

• Two-Factor Authentication (2FA)

• Security guard patrolling the premises

What is the function of a DMZ (Demilitarized Zone) in network security?

• Encrypts email communications

• Monitors employee productivity

• Acts as a buffer zone between external and internal networks

• Blocks access to social media

Which layer is responsible for protecting individual devices like laptops and servers?

• Network Layer

• Data Layer

• Endpoint Security

• Application Layer

Which of the following is a benefit of the Zero Trust Security Model?

• Assumes everything inside the network is safe

• Allows unrestricted access for trusted devices

• Requires continuous verification of all resources

• Uses only physical security measures

What is the main purpose of Web Application Firewalls (WAFs)?

• Encrypt network traffic

• Filter data at the physical layer

• Protect applications from web-based threats

• Monitor VPN traffic

What does the Principle of Least Privilege (PoLP) aim to enforce?

• Unlimited user access for ease of work

• Minimum privileges needed to complete a job

• Randomly assigned permissions

• Shared admin access across departments

Which real-world event highlighted the risk of not implementing PoLP?

• Sony Data Breach

• Facebook’s data exposure

• Edward Snowden’s NSA file leak

• Heartbleed vulnerability

How does PoLP help in reducing cybersecurity risks?

• By installing antivirus on all devices

• By allowing administrative access to all users

• By limiting access to only required system components

• By logging keystrokes of users