Examice

Exam GSEC All QuestionsBrowse all questions from this exam

Question 20

With regard to defense-in-depth, which of the following statements about network design principles is correct?

A secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.

A secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.

A secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.

A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.

Correct Answer: D

A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements. This is a core principle of defense-in-depth, which aims to provide multiple layers of security to minimize the risk and impact of a security breach.

Discussion

arvkvOption: D

The correct answer is: D. A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements. This is a fundamental principle of defence-in-depth, which is a security strategy that involves implementing multiple layers of security controls to protect a network. By separating systems with different security requirements, you can help to reduce the risk of a security breach spreading to other parts of the network.