Domain 2: Architecture and Design

Question 1

What is a demilitarized zone (DMZ)?

Answer 1

A DMZ is a network segment between an internal network and an external network (usually the internet) that adds an additional layer of security by isolating publicly accessible services.

Question 2

What is defense in depth?

Answer 2

Defense in depth is a security strategy that employs multiple layers of protection to guard against potential threats and vulnerabilities.

Question 3

What is network segmentation?

Answer 3

Network segmentation is the practice of dividing a network into smaller segments to limit the spread of attacks and improve security management.

Question 4

What is virtualization?

Answer 4

Virtualization is the creation of virtual instances of resources, such as servers, storage, or networks, to improve efficiency, scalability, and security.

Question 5

What is cloud security?

Answer 5

Cloud security refers to the technologies, policies, controls, and services that protect data, applications, and infrastructure in cloud computing environments.