200-201 Question 374
Select 3An organization has identified its critical asset address space, which includes its primary database servers, email servers, and web servers. The cybersecurity team wants to implement additional safeguards to monitor unauthorized access attempts to these critical assets. Which of the following measures would be most appropriate to enhance security for the critical asset address space?
- A
Implement an Intrusion Detection System (IDS) to monitor traffic to and from the critical asset address space.
- B
Restrict access to the critical asset address space using Access Control Lists (ACLs) on network devices.
- C
Deploy network segmentation to isolate the critical asset address space from the rest of the network.
- D
Disable logging for the critical asset address space to prevent log overflow.
- E
Use a public IP address range to make critical assets accessible for easier monitoring.
Show answer and explanation
Correct answers: A, B, C
Explanation
To secure critical asset address space, monitoring traffic with IDS, restricting access using ACLs, and isolating critical assets through network segmentation are effective measures. These strategies help detect, prevent, and contain potential threats while minimizing exposure. Disabling logging or using public IP addresses for critical assets would compromise security rather than enhance it.
- A. Correct.
Implementing an IDS is a recommended measure to monitor suspicious and unauthorized activities targeting the critical asset address space. This ensures timely detection and response to potential threats.
- B. Correct.
Restricting access using ACLs is an effective way to ensure that only authorized users and systems can access critical assets, reducing the risk of unauthorized access.
- C. Correct.
Network segmentation helps isolate critical assets, limiting the attack surface and reducing the potential for lateral movement within the network in case of a breach.
- D. Incorrect.
Disabling logging is not a valid security measure. Logs are essential for tracking access attempts and detecting anomalies. Disabling logs would hinder the organization's ability to monitor critical assets effectively.
- E. Incorrect.
Using a public IP address range would expose critical assets to the internet, significantly increasing their attack surface. This is not a recommended security practice for critical assets.