GSEC Defense in Depth Architecture Quiz

1. Which security control is an example of a preventive measure in defense in depth?

Security audit logs

Access control lists (ACLs)

Incident response team

Vulnerability scan reports

2. Which control type is designed to mitigate the impact of a security breach?

Preventive control

Detective control

Corrective control

Deterrent control

Submit

4. Which approach best represents a zero trust security model within defense in depth?

Trust all internal network traffic

Verify every user and device request, regardless of location

Trust users once they authenticate once

Allow all traffic after the firewall

5. True or False: Logging and monitoring are passive security controls that do not actively prevent attacks.

True

False

6. Which technology creates a logical network boundary within a physical network?

Virtual private network (VPN)

Virtual local area network (VLAN)

Proxy server

Load balancer

Submit

8. Which of the following is a corrective security control?

Firewall rule blocking traffic

Security camera monitoring

System backup and recovery

User login requirement

Submit

10. True or False: Defense in depth eliminates the need for security awareness training.

True

False

11. What is the primary goal of a defense in depth security strategy?

Relying on a single strong firewall

Implementing multiple overlapping security layers to protect assets

Using only encryption for all data

Eliminating all user access to sensitive systems

Submit

13. Which of the following best describes endpoint protection in defense in depth?

Antivirus software installed on individual devices

A combination of antivirus, firewall, and behavioral analysis on devices

Network-only threat detection

Disabling all external ports on computers

14. True or False: Intrusion detection systems (IDS) can prevent attacks from occurring.

True

False

15. Which principle ensures that users have only the minimum access needed to perform their job?

Defense in depth

Principle of least privilege

Security by design

Zero trust architecture

Submit

17. Which authentication method best supports defense in depth?

Single password only

Multi-factor authentication (MFA)

Username and security question

Biometric scanning alone

18. True or False: A demilitarized zone (DMZ) is a network segment with reduced security controls.

True

False

Submit

20. Which of the following is NOT a typical layer in a defense in depth model?

Physical security

Network security

Application security

User preference settings

GSEC Defense in Depth Architecture Quiz

1. Which security control is an example of a preventive measure in defense in depth?

2.

What first name or nickname would you like us to use?

2. Which control type is designed to mitigate the impact of a security breach?

3. Encryption serves defense in depth by ____.

4. Which approach best represents a zero trust security model within defense in depth?

5. True or False: Logging and monitoring are passive security controls that do not actively prevent attacks.

6. Which technology creates a logical network boundary within a physical network?

7. Data classification is important in defense in depth because it ____.

8. Which of the following is a corrective security control?

9. A ____ is a security control that detects unauthorized access attempts after they occur.

10. True or False: Defense in depth eliminates the need for security awareness training.

11. What is the primary goal of a defense in depth security strategy?

12. Patch management contributes to defense in depth by ____.

13. Which of the following best describes endpoint protection in defense in depth?

14. True or False: Intrusion detection systems (IDS) can prevent attacks from occurring.

15. Which principle ensures that users have only the minimum access needed to perform their job?

16. A ____ is a network security device that monitors and controls incoming and outgoing traffic.

17. Which authentication method best supports defense in depth?

18. True or False: A demilitarized zone (DMZ) is a network segment with reduced security controls.

19. Network segmentation helps achieve defense in depth by ____.

20. Which of the following is NOT a typical layer in a defense in depth model?