Valid CAS-003 Dumps shared by ExamDiscuss.com for Helping Passing CAS-003 Exam! ExamDiscuss.com now offer the newest CAS-003 exam dumps, the ExamDiscuss.com CAS-003 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CAS-003 dumps with Test Engine here:
The senior security administrator wants to redesign the company DMZ to minimize the risks associated with both external and internal threats. The DMZ design must support security in depth, change management and configuration processes, and support incident reconstruction. Which of the following designs BEST supports the given requirements?
Correct Answer: A
Explanation Security in depth is the concept of creating additional layers of security. The traditional approach of securing the IT infrastructure is no longer enough. Today's threats are multifaceted and often persistent, and traditional network perimeter security controls cannot effectively mitigate them. Organizations need to implement more effective, multi-level security controls that are embedded with their electronic assets. They need to protect key assets from both external and internal threats. This security in depth approach is meant to sustain attacks even when perimeter and traditional controls have been breached. In this question, using two firewalls to secure the DMZ from both external and internal attacks is the best approach. Having each firewall managed by a separate administrator will reduce the chance of a configuration error being made on both firewalls. The remote logging will enable incident reconstruction.