nerdexam
CompTIA

CV0-004 · Question #326

A company has solid, validated border protection including a next-generation firewall and IPS. However, compromises and breaches continue. Which of the following is the best way to improve the…

The correct answer is C. Shift the focus from border protection to a Zero Trust architecture focused on identities. Even with strong border protection, attackers often bypass perimeter defenses through phishing, stolen credentials, or insider threats. Adopting a Zero Trust architecture improves security by continuously verifying users, devices, and identities regardless of location…

Security

Question

A company has solid, validated border protection including a next-generation firewall and IPS. However, compromises and breaches continue. Which of the following is the best way to improve the company’s security controls and reduce the number of incidents?

Options

  • AAssess the border protection assets against a CIS benchmark and apply recommendations.
  • BExecute a network scan on the border protection and close ports that can be used by attackers.
  • CShift the focus from border protection to a Zero Trust architecture focused on identities.
  • DInclude a WAF on the network border, increasing protection and adopting security in layers.

How the community answered

(28 responses)
  • A
    18% (5)
  • B
    4% (1)
  • C
    68% (19)
  • D
    11% (3)

Explanation

Even with strong border protection, attackers often bypass perimeter defenses through phishing, stolen credentials, or insider threats. Adopting a Zero Trust architecture improves security by continuously verifying users, devices, and identities regardless of location, significantly reducing incidents beyond the network border.

Topics

#Zero Trust architecture#Security architecture#Incident prevention#Perimeter security limitations

Community Discussion

No community discussion yet for this question.

Full CV0-004 Practice