Advanced Computer Security Trends

In a modern tech company, Angga, the network security manager, realizes that the traditional firewall model, based on perimeter defense and simple packet filtering, has become insufficient in their distributed and cloud-centric network environment because:

• Modern networks are distributed and cloud-centric, making perimeter-based defenses inadequate.

• Packet filtering is now faster than before, making traditional firewalls obsolete.

• Firewalls are no longer able to block any network traffic.

• Traditional firewalls are too expensive for modern organizations.

What is the "Castle Moat Analogy" used to describe, and why does the document argue that this analogy no longer accurately represents modern network security challenges?

• The "Castle Moat Analogy" is used to describe traditional network security, and the document argues it is outdated because modern threats bypass perimeter defenses.

• The "Castle Moat Analogy" is used to describe cloud computing, and the document argues it is outdated because of increased server capacity.

• The "Castle Moat Analogy" is used to describe physical building security, and the document argues it is outdated due to new construction materials.

• The "Castle Moat Analogy" is used to describe software development, and the document argues it is outdated because of agile methodologies.

Identify the four key features that distinguish a Next-Generation Firewall (NGFW) from a traditional one.

• Application awareness, integrated intrusion prevention, cloud-delivered threat intelligence, and deep packet inspection

• Basic packet filtering, stateful inspection, VPN support, and NAT

• URL filtering, antivirus scanning, port forwarding, and DHCP services

• Load balancing, wireless access control, VLAN support, and static routing

Encrypted Traffic Analysis (TLS/SSL decryption and inspection) is a crucial capability for NGFWs, especially since "over 80% of web traffic is now encrypted" because:

• it allows threats hidden in encrypted traffic to be detected and blocked.

• it increases the speed of encrypted web traffic.

• it reduces the need for user authentication.

• it eliminates the need for firewall updates.

Which of the following lists the three core principles of effective firewall design, and explains how the principle of "Least Privilege" reduces the potential impact of an internal security breach?

• Segmentation, Least Privilege, and Defense in Depth; Least Privilege limits user access, reducing damage if a breach occurs.

• Authentication, Encryption, and Monitoring; Least Privilege ensures all users have admin rights.

• Redundancy, Speed, and Accessibility; Least Privilege increases network performance.

• Openness, Flexibility, and Sharing; Least Privilege allows unrestricted access for efficiency.

Network Segmentation contributes to security by achieving which primary goal in defending against attackers, specifically related to movement?

• It limits lateral movement within the network.

• It increases the speed of data transfer.

• It allows unrestricted access to all network resources.

• It eliminates the need for firewalls.

In a recent team meeting, Tiara emphasized the importance of adapting to the new work environment shaped by hybrid work and cloud-first applications. She asked the team, "What do you think is the 'new perimeter' we need to focus on in this modern network reality?"

• Identity

• Firewall

• Physical office location

• Network hardware

Secure Access Service Edge (SASE) is a framework that converges which of the following security or networking functions into a single cloud-delivered service?

• SD-WAN, Firewall as a Service (FWaaS), and Zero Trust Network Access (ZTNA)

• Load Balancing, Email Filtering, and Data Backup

• Antivirus, Printer Management, and Patch Deployment

• Network Cabling, Physical Security, and Power Supply

In a modern corporate environment, Joko, the IT manager, is implementing a Zero Trust Architecture (ZTA) to enhance security. He emphasizes the three fundamentals of ZTA and the key access decision factor in this model, according to the NIST guidelines. What are these fundamentals and the key access decision factor?

• Continuous verification, least privilege access, and assume breach; with access decisions based on trust in user identity and device health.

• Perimeter security, static credentials, and network segmentation; with access decisions based on location.

• Single sign-on, password complexity, and firewall rules; with access decisions based on user convenience.

• Role-based access, VPN usage, and endpoint encryption; with access decisions based on device type.

In a company, Angga is responsible for implementing a Zero Trust security model. He needs to select two specific ways that firewalls can be used to enforce this model.

• Firewalls enforce least-privilege access and segment network traffic based on user identity.

• Firewalls allow unrestricted access to all internal resources.

• Firewalls disable all monitoring and logging features.

• Firewalls only protect against external threats, not internal ones.