Back to Internet of Things Security

Secure network architecture

5 minutes 5 Questions

A secure network architecture is crucial in IoT security to protect connected devices and their data from unauthorized access and cyberattacks. This includes segmenting IoT networks from other corporate networks to limit potential damage from a security breach. Implementing firewalls, intrusion pre…

Test mode:
Start practice test
CompTIA Security+ - Secure network architecture Example Questions

Test your knowledge of Secure network architecture

Question 1

A recent security audit uncovered that an organization's DMZ is not properly segmented from the internal network. Several critical servers were identified as being vulnerable to attack from the DMZ. What is the best solution to remediate this issue?

Correct Answer: Implement a multi-tiered DMZ using multiple firewalls

The best solution to remediate the issue of an improperly segmented DMZ is to implement a multi-tiered DMZ using multiple firewalls. This approach addresses the root cause of the problem by creating distinct security zones with multiple layers of protection. A multi-tiered DMZ architecture uses multiple firewalls to create separate network segments, effectively isolating the DMZ from the internal network and providing granular control over traffic flow. This design significantly reduces the attack surface and minimizes the risk of lateral movement if a breach occurs in the DMZ. By implementing multiple firewalls, the organization can enforce strict access controls, monitor traffic more effectively, and apply security policies specific to each network segment. This solution not only improves the overall security posture but also allows for better management and scalability of the network infrastructure. It provides a robust defense-in-depth strategy that aligns with best practices for network segmentation and protection of critical assets.

Question 2

A company is planning to implement multi-factor authentication (MFA) to enhance the security of their remote access VPN solution. Which of the following MFA options is the most secure and least susceptible to common attack vectors?

Correct Answer: Use a combination of something you know, something you have, and something you are

The most secure MFA option is to use a combination of something you know (e.g., a password), something you have (e.g., a hardware token), and something you are (e.g., a biometric identifier like fingerprint). This combination provides the strongest protection against common attack vectors.

Question 3

A financial organization is experiencing a high number of network intrusions after deploying their new customer-facing web application. What is the most appropriate solution to protect their environment?

Correct Answer: Deploy an intrusion prevention system (IPS) at the network perimeter

Deploying an Intrusion Prevention System (IPS) at the network perimeter will help to actively monitor and block any suspicious network traffic, preventing potential intrusions. Disabling the firewall would reduce security, and the other options do not directly address the issue of network intrusions.

More Secure network architecture questions
14 questions (total)
Start 14 question test