CompTIA Exam CAS-005 Topic 2 Question 13 Discussion

Actual exam question for CompTIA's CAS-005 exam

Question #: 13
Topic #: 2

A company wants to install a three-tier approach to separate the web. database, and application servers A security administrator must harden the environment which of the following is the best solution?

ADeploying a VPN to prevent remote locations from accessing server VLANs

BConfiguring a SASb solution to restrict users to server communication

CImplementing microsegmentation on the server VLANs

Dinstalling a firewall and making it the network core

Show Suggested Answer

Suggested Answer: C

The best solution to harden a three-tier environment (web, database, and application servers) is to implement microsegmentation on the server VLANs. Here's why:

Enhanced Security: Microsegmentation creates granular security zones within the data center, allowing for more precise control over east-west traffic between servers. This helps prevent lateral movement by attackers who may gain access to one part of the network.

Isolation of Tiers: By segmenting the web, database, and application servers, the organization can apply specific security policies and controls to each segment, reducing the risk of cross-tier attacks.

Compliance and Best Practices: Microsegmentation aligns with best practices for network security and helps meet compliance requirements by ensuring that sensitive data and systems are properly isolated and protected.

CompTIA Security+ SY0-601 Study Guide by Mike Chapple and David Seidl

NIST Special Publication 800-125: Guide to Security for Full Virtualization Technologies

CIS Controls: Control 12 - Boundary Defense

by Ernest at Apr 07, 2025, 04:30 AM

Limited Time Offer

25%

Off

Get Premium CAS-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

2 months ago

Hmm, I don't know about that. Installing a firewall at the network core? That's like using a sledgehammer to crack a nut. Talk about overkill!

upvoted 0 times

Mi

5 days ago

User 3: What about using access control lists (ACLs) to restrict traffic between the servers?

upvoted 0 times

...

Pamella

18 days ago

User 2: Pamella, that's a good idea. VLANs can help isolate the servers without the need for a firewall at the network core.

upvoted 0 times

...

Isreal

1 months ago

User 1: How about implementing VLANs to separate the servers?

upvoted 0 times

...

Stanford

2 months ago

C) Implementing microsegmentation on the server VLANs is the way to go. That's the best solution to harden the environment and limit access to specific server resources.

upvoted 0 times

...

Annmarie

2 months ago

I think the best solution is implementing microsegmentation on the server VLANs.

upvoted 0 times

...