upcoming merger and are both concerned with minimizing security exposures to each others network throughout the test. Which of the following is the FIRST thing both sides should do prior to…

Question

Options

• ACreate a DMZ to isolate the two companies and provide a security inspection point for all inter-company
• BDetermine the necessary data flows between the two companies.
• CImplement a firewall that restricts everything except the IPSec VPN traffic connecting the two companies.
• DImplement inline NIPS on the connection points between the two companies.

• A
  8% (2)
• B
  75% (18)
• C
  4% (1)
• D
  13% (3)

Explanation

Before implementing any technical controls (DMZ, firewalls, NIPS), both companies must first understand what data actually needs to flow between the two networks. This requirements-gathering step is foundational: you cannot properly configure access controls, segment traffic, or design inspection points without knowing which systems need to communicate and why. Starting with technical solutions before understanding business data flow requirements risks either over-blocking legitimate traffic or under-protecting sensitive data. All subsequent security architecture decisions (DMZ design, firewall rules, IPS tuning) derive from this initial mapping of necessary data flows.

No community discussion yet for this question.