H12-725: HCIP-Security V4.0

By Huawei · Question Mode

QuestionQ5

Network Security

To protect against network attacks, it is sufficient to deploy security devices, such as a firewall and IPS, only at the Internet egress. No security device must be deployed on the enterprise intranet.

Explanation

Perimeter-only controls cannot protect against insider threats, compromised internal devices, or lateral movement within an enterprise. Defense in depth requires appropriate internal security controls and segmentation in addition to Internet-egress protections.

Community Discussion

No comments yet. Be the first to start the discussion!