Certmaster CE Security+ Domain 3.0 Security
Architecture Assessment Test Questions with 100%
Correct Answers
A financial services company tasks its IT security team with reducing the network's
attack surface. They have segmented the network into security zones, put port security
measures in place, and physically isolated critical servers. The IT security team wants to
further reduce the risk of attack by managing traffic flow between security zones. Which
of the following measures should the team implement? - ✔✔D. Apply the principle of
least privilege when defining traffic policies between zones.
A large organization is redesigning its network infrastructure to increase security and
reduce the potential attack surface. The organization considers implementing an
Intrusion Prevention System (IPS) and an Intrusion Detection System (IDS) into its
security zones. The IT manager wants to secure connectivity and considers different
network appliances and port security measures. Which of the following options BEST
describes the benefits and disadvantages of placing the IPS/IDS devices inline wit -
✔✔C. Inline placement allows for active prevention measures but can become a
single point of failure.
A company is developing a system that requires instantaneous response to certain
inputs. The system will incorporate into a larger device and will not have many
resources. What type of system is likely to be MOST suitable for this scenario? -
✔✔A. Real-time operating system
An organization is trying to determine the appropriate level of access controls to put in
place for a certain type of data. This data includes company financial reports that should
only be accessible to the senior management team. How should the organization MOST
accurately classify this data? - ✔✔A. Confidential
A network engineer is segmenting a company's network to improve security. In terms of
routing infrastructure, which of the following strategies would the engineer employ to
, segment different types of hosts attached to the same switch? - ✔✔B. Assign each
host to a different virtual local area network (VLAN).
A national park posts information about its flora and fauna on its website. This
information does not contain any personally identifiable information or sensitive
government data. How should the park service classify this data? - ✔✔B. Public
A large organization is planning to restructure its network infrastructure to create better
security boundaries and enhance control over network traffic as it undergoes rapid
expansion with an increasing number of remote employees. What should the company
implement to meet these requirements? - ✔✔B. Logical segmentation
An organization is considering a hybrid cloud deployment to leverage the benefits of
both private and public cloud resources. While reviewing third-party vendors, what
critical aspect should the employees consider for a secure and effective transition? -
✔✔C. Establish clear service level agreements
A rapidly growing e-commerce company is considering changes to its current on-
premises network infrastructure to handle increasing workloads better and provide high
availability. The company expresses concerns about the potential costs and complexity
associated with scalability and ease of recovery from potential failures. Which
infrastructure options should the company consider to address its needs? - ✔✔C.
Implement a hybrid solution with a mix of on-premises and cloud-based infrastructure.
A systems architect is designing a new data center. The architect looks at different
factors such as equipment type, data center location, and power specifications. What is
the primary concern during this stage of the process? - ✔✔D. Considerations
A major e-commerce company is planning for a disaster recovery strategy that balances
minimal data loss, quick recovery, and budget considerations. It needs a recovery site
that does not necessitate instant recovery but restores critical systems promptly. Which
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Examsplug. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.00. You're not tied to anything after your purchase.
