Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam

Exam 312-50v11 topic 1 question 90 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 90
Topic #: 1

A large mobile telephony and data network operator has a data center that houses network elements. These are essentially large computers running on Linux.
The perimeter of the data center is secured with firewalls and IPS systems.
What is the best security policy concerning this setup?

A. Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
B. As long as the physical access to the network elements is restricted, there is no need for additional measures.
C. There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
D. The operator knows that attacks and down time are inevitable and should have a backup site.

Show Suggested Answer

Suggested Answer: A 🗳️

by ANDRESCB1988 at July 23, 2021, 5:31 a.m.

Comments

Submit Cancel

VOAKDO

1 year, 6 months ago

Selected Answer: A

at least audits,..., never is enought security.

upvoted 2 times

...

brdweek

2 years, 10 months ago

A is correct

upvoted 2 times

...

study_Somuch

2 years, 10 months ago

It seems A is the best answer. No sec config is perfect.

upvoted 3 times

...

brdweek

2 years, 11 months ago

Why not B?

upvoted 1 times

AjaxFar

2 years, 6 months ago

You be comedian, why it go be B

upvoted 1 times

Keapa_a

1 year, 5 months ago

Hahaha....Bros! I tire o

upvoted 1 times

...

shiftry

2 years, 8 months ago

There is not such thing like "complete restrict access". You have the Datacenter operators and technicians, even people from the company. All of then can be insider threats. You need to test periodical this security, for that you need to audit.

upvoted 1 times

...

Brinhosa

2 years, 11 months ago

Why not D?

upvoted 1 times

Forrest43

1 year ago

A seems very reasonable, D seems feasible too if budget is available. A is a minimum, D is optional, but it is correct too. Embrace failure as they say.

upvoted 1 times

...

nick526

2 years, 5 months ago

thats what i thought, i guess option D comes after implementing option A

upvoted 4 times

JT95

1 year, 5 months ago

More than that, option D is expensive and hard to implement, it is not always as easy as to say "let's do backups", most of the time it requires a stop in production that can't be afforded. I guess A is fitter because those solutions have less impact on the production chain.

upvoted 1 times

...

ANDRESCB1988

3 years ago

correct

upvoted 1 times

kianzz

2 years ago

your input provide no contribution.

upvoted 2 times

...