Exam SY0-601 topic 1 question 197 discussion

Integrate the components in cloud and then audit them to ensure performance and security are working to expectations

I think the answer is C. I copied what is written below out of an article/blog on CompTIA’s website (https://www.comptia.org/blog/security-awareness-training-network-segmentation#) “Following are a few benefits of network segmentation: - Limiting access privileges to those who truly need it - Protecting the network from widespread cyberattacks - Boosting network performance by reducing the number of users in specific zones”

D la...on9

Option A: HA ---> Ensures minimal downtime and instant recovery from outages. Option B: App Sec ----> Ensures security against vulnerabilities by enforcing best code practices, code review, and penetration tests. Option C: Segmentation -----> Ensures security by isolating systems to contain data breaches and anomalies. Option D: Here we address both Performance and Security. Integration ----> Ensures seamless operations through load balancing and redundancy. Auditing ------> Facilitates constant monitoring to track and respond to security events in real-time.

Segmentation is a best practice in network security that can both maintain performance and enhance security. By creating separate segments for different parts of the network, you can control and limit traffic, reducing congestion (thereby potentially improving performance), and you can limit the spread of security threats.

C. Segmentation To ensure both performance and security remain intact during the transition of network services to the cloud after acquiring several small companies, the best option is: C. Segmentation. Segmentation involves dividing a network into separate segments or subnetworks to isolate different types of traffic, applications, or users. By implementing segmentation, the company can create logical boundaries between different parts of the network, including those acquired from the smaller companies and those transitioning to the cloud. This helps improve security by limiting the scope of potential breaches and unauthorized access.

C. Segmentation

D is my vote

For performance, you "integrate" what you have post-merger. Auditing is a security control.

I think the answer is D because: Integration and auditing. The CSP integrates security controls into the cloud-based resources, and auditing methods help customers identify the effectiveness of security controls at protecting the confidentiality, integrity, and availability of cloudbased resources. Source is from CompTIA-Security-Get-Certified-Get-Ahead-SY0-601-Study-Guide-Darril-Gibson.

A. High availability High availability is crucial when transitioning network services to the cloud, as it ensures that services remain accessible and performant. It involves designing the infrastructure and systems in a way that minimizes downtime and ensures continuous access to critical resources. While application security, segmentation, and integration are also important considerations, high availability directly addresses the need for both performance and security during the transition and in the cloud environment.

So where "integration" makes some folks think of creating a "seamless" network; I don't think that's what we should aim for. We actually WANT seams in the network. We want each subsidiary to stand on its own beneath our umbrella. We want to transition each company's processes to the cloud without contaminating any other piece of the entire conglomerate. The audit focus need not include US, the parent company. We've set our standard for our subsidiaries to mimic. So why audit a big heaping mess that was "integrated" into our company when we can audit segmented networks? This keeps our acquisitions separate and secure, but all part of the same whole. It keeps performance to the max and compromise to a minimum. Sectioned off from each other. Segmented.

I choose: D. Integration and auditing The company is transitioning network services to the cloud (they also just acquired several other small companies). The company's primary focus in this scenario is to ensure performance and security REMAIN intact. The key word: "remain intact" meaning they already have strong performance and security but they want this to continue while transitioning these additional companies and their network services to the cloud.

keywords.. “A company acquired several other small companies. The company wants to make sure that performance and security remain intact.“ Since these are new acquired small companies, it is best to understand what the small company network infrastructures before making the decision on the segmentation changes.

Segmentation involves logically dividing the network into isolated segments, often referred to as network zones or microsegments. This approach can help in several ways: Security: Segmentation helps contain security breaches. If one segment is compromised, the attacker's access is limited to that specific segment, reducing the overall risk to the network. Performance: By isolating and optimizing network segments for specific services or applications, performance can be maintained or improved for critical services even as the network transitions to the cloud. Compliance: Segmentation can aid in compliance efforts by isolating sensitive data and applications in separate segments, helping organizations meet regulatory requirements. Option D (Integration and auditing) is essential for ensuring the transition to the cloud is well-managed and compliant, but it does not directly address performance and security during the transition.

Segmentation divides a computer network into smaller parts. The purpose is to improve network performance and security. Other terms that often mean the same thing are network segregation, network partitioning, and network isolation. Professor Messer also covers this on his videos. Segmentation is the correct answer.

The only answer that makes sense id is segmentation!