A multinational corporation, with a complex network infrastructure comprising a central data center, several remote offices, and cloud-based services, faces challenges in managing network security…

Question

Options

• AEstablish a zero-trust model across the network, segmenting based on user roles and data access needs, applying uniform security policies across all segments, and using SD-WAN to manage traffic between remote offices and the data center.
• BSegment the network based on data sensitivity levels, isolating highly sensitive data in a secure segment with restricted access, and use quality of service policies to prioritize critical application traffic across segments.
• CCreate segments based on application criticality, with dedicated segments for critical applications to ensure performance, and enforce strict access control and monitoring for segments with sensitive data.
• DImplement VLANs to segregate traffic based on the geographical location of offices, use VPNs for secure inter-office communication, and apply stricter access controls for segments that handle sensitive data.

• A
  69% (35)
• B
  4% (2)
• C
  8% (4)
• D
  20% (10)

Explanation

Option A is correct because it addresses all four variables simultaneously: zero-trust handles diverse geographical locations and varying data sensitivity by granting access based on identity/role rather than network location, while SD-WAN optimizes performance and enables secure inter-office communication across the complex infrastructure. Option B is close but incomplete - prioritizing by data sensitivity alone ignores application criticality and doesn't address the geographic/inter-office communication challenge. Option C focuses on application criticality and access controls but misses the broader architectural need for a trust model that scales across diverse locations and user roles. Option D uses geography as the primary segmentation criterion (VLANs per office), which creates administrative overhead and doesn't inherently address data sensitivity or application performance - VLANs and VPNs alone are reactive tools, not a holistic security strategy.

Memory tip: Think "A covers ALL" - when a question lists multiple complex variables (geography, sensitivity, criticality, performance), the correct answer is almost always the one that addresses every variable with a unified framework (zero-trust + SD-WAN) rather than solutions that optimize for just one or two dimensions.

No community discussion yet for this question.