Module 18: Understanding Defense

9. What is a characteristic of a layered defense-in-depth security approach?

The failure of one safeguard does not affect the effectiveness of the other safeguards.

6. What component of a security policy explicitly defines the type of traffic allowed on a network and what users are allowed and not allowed to do?

acceptable use policies

5. An administrator is concerned with restricting which network applications and uses are acceptable to the organization. What security policy component does the administrator use to address these concerns?

acceptable use policy

3. With the evolution of borderless networks, which vegetable is now used to describe a defense-in-depth approach?

artichoke

4. Which type of business policy establishes the rules of conduct and the responsibilities of employees and employers?

company

2. Which device is usually the first line of defense in a layered defense-in-depth approach?

edge router

12. What device would be used as a second line of defense in a defense-in-depth approach?

firewall

13. Which two areas must an IT security person understand in order to identify vulnerabilities on a network? (Choose two.)

important applications used hardware used by applications

7. What device would be used as the third line of defense in a defense-in-depth approach?

internal router

8. Refer to the exhibit. The security policy of an organization allows employees to connect to the office intranet from their homes. Which type of security policy is this?

remote access

10. Which is a BYOD security best practice?

subscribe to a device locator service with remote wipe feature

11. What do security compliance regulations define?

what organizations are responsible for providing and the liability for failure to comply

1. How does BYOD change the way in which businesses implement networks?​

BYOD provides flexibility in where and how users can access network resources.