Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA Exam CAS-005 Topic 2 Question 13 Discussion

Actual exam question for CompTIA's CAS-005 exam
Question #: 13
Topic #: 2
[All CAS-005 Questions]

A company wants to install a three-tier approach to separate the web. database, and application servers A security administrator must harden the environment which of the following is the best solution?

Show Suggested Answer Hide Answer
Suggested Answer: C

The best solution to harden a three-tier environment (web, database, and application servers) is to implement microsegmentation on the server VLANs. Here's why:

Enhanced Security: Microsegmentation creates granular security zones within the data center, allowing for more precise control over east-west traffic between servers. This helps prevent lateral movement by attackers who may gain access to one part of the network.

Isolation of Tiers: By segmenting the web, database, and application servers, the organization can apply specific security policies and controls to each segment, reducing the risk of cross-tier attacks.

Compliance and Best Practices: Microsegmentation aligns with best practices for network security and helps meet compliance requirements by ensuring that sensitive data and systems are properly isolated and protected.


CompTIA Security+ SY0-601 Study Guide by Mike Chapple and David Seidl

NIST Special Publication 800-125: Guide to Security for Full Virtualization Technologies

CIS Controls: Control 12 - Boundary Defense

Contribute your Thoughts:

Phuong
2 days ago
I agree with Annmarie, microsegmentation can provide granular control and enhance security.
upvoted 0 times
...
Rashida
4 days ago
Hmm, I don't know about that. Installing a firewall at the network core? That's like using a sledgehammer to crack a nut. Talk about overkill!
upvoted 0 times
...
Stanford
5 days ago
C) Implementing microsegmentation on the server VLANs is the way to go. That's the best solution to harden the environment and limit access to specific server resources.
upvoted 0 times
...
Annmarie
20 days ago
I think the best solution is implementing microsegmentation on the server VLANs.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77