CompTIA
CAS-002 · Question #60
CAS-002 Question #60: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-002 to reveal the answer and full explanation for question #60. The question stem and answer options stay visible for context.
Question
A corporation relies on a server running a trusted operating system to broker data transactions between different security zones on their network. Each zone is a separate domain and the only connection between the networks is via the trusted server. The three zones at the corporation are as followeD. Zone A connects to a network, which is also connected to the Internet through a router. Zone B to a closed research and development network. Zone C to an intermediary switch supporting a SAN, dedicated to long-term audit log and file storage, so the corporation meets compliance requirements. A firewall is deployed on the inside edge of the Internet connected router. Which of the following is the BEST location to place other security equipment?
Options
- AHIPS on all hosts in Zone A and B, and an antivirus and patch server in Zone C.
- BA WAF on the switch in Zone C, an additional firewall in Zone A, and an antivirus server in
- CA NIPS on the switch in Zone C, an antivirus server in Zone A, and a patch server in Zone B.
- DA NIDS on the switch in Zone C, a WAF in Zone A, and a firewall in Zone B.
Unlock CAS-002 to see the answer
You've previewed enough free CAS-002 questions. Unlock CAS-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.