Which in-depth approach is used when deploying defense …

Which in-depth approach is used when deploying defense in an industrial zone?

Which in-depth approach is used when deploying defense in an industrial zone?

A.
Besides using a dedicated firewall / DMZ construction use an IOS based firewall on the WAN router connecting the industrial site to the Internet.

B.
Use NTP to make sure that time stamps of log messages are synchronized such that you can do root cause analysis.

C.
Deploy an IDS solution with knowledge about industrial protocols in the industrial zone in combination with a firewall.

D.
Use multiple firewalls from different vendors in such a way that network traffic will have to traverse both firewalls so that security holes of one firewall is caught by the other firewall.



Leave a Reply 3

Your email address will not be published. Required fields are marked *


Daz Przem

Daz Przem

New 200-601 Exam Questions Updated Recently (25/Sep/2017):

NEW QUESTION 74
Which two ports does EtherNet/IP use to communicate? (Choose two.)

A. TCP 44818
B. UDP 44818
C. TCP 502
D. UDP 502
E. TCP 2222
F. UDP 2222

Answer: AF

NEW QUESTION 75
Which of the following correctly pairs the dotted decimal subnet mask with the correct number of binary bits that represent the subnet mask?

A. 255.255.255.192 and /25
B. 255.255.255.248 and /28
C. 255.255.255.224 and /26
D. 255.255.255.248 and /27
E. 255.255.255.240 and /28
F. 255.255.255.240 and /16

Answer: E

NEW QUESTION 76
Refer to the exhibit. What are three traffic and interconnection requirements for the devices in the exhibit? (Choose three.)
……

A. The EtherNet/IP drive connections are in a high-voltage area and need protection from electromagnetic noise, so shielded cable that is rated for 600 V is advised.
B. EtherNet/IP devices such as the controller, drive, VoIP phone, and IP camera should be in the same VLAN.
C. CIP traffic has the highest bandwidth requirement so it needs the highest QoS setting.
D. EtherNet/IP drive traffic has high sensitivity to random drops, latency, and jitter.
E. Real-time motion control and VoIP traffic can share the same VLAN with the proper QoS setting.
F. IEEE1588 and PTP are important for ensuring real-time synchronization.

Answer: ADF

NEW QUESTION 77
You are a called upon to troubleshoot connectivity problems to a network device on a production floor. You have used ping and traceroute to verify that you cannot connect to the device from the management network. The network is 209.165.202.128/27 and the device has been given the IP address 209.165.202.158 and mask 255.255.255.224. You have verified that you can reach the device with your computer connected to the same switch as the device. What could be the cause of this problem?

A. The device is set to the wrong subnet mask.
B. The device is set to the wrong IP address.
C. The device has no IP default gateway.
D. The device is connected to a switchport in the wrong VLAN.

Answer: C

NEW QUESTION 78
Which prompt is used to configure parameters for the Ethernet ports of an industrial switch?

A. Switch(config-if)#
B. Switch(config-if-ind)#
C. Switch(config-line)#
D. Switch(config-ind)#
E. Switch(config-vlan)#

Answer: A

NEW QUESTION 79
What are two benefits of a star network topology? (Choose two.)

A. Disruption of the entire network is not required when adding new machines.
B. Any problem which leaves the network inoperable can be traced to the central hub.
C. This network type requires less cable as compared to linear bus topology.
D. The performance of one of the numerous nodes cannot reflect on the performance of other nodes.
E. The performance of the entire network is directly dependent on the performance of the hub.

Answer: AB

NEW QUESTION 80
What is the purpose of Spanning Tree Protocol?

A. to prevent routing loops
B. to create a default route
C. to provide multiple gateways for hosts
D. to maintain a loop-free Layer 2 network topology
E. to enhance the functions of SNMP

Answer: D

NEW QUESTION 81
A small manufacturing company has a Class C network address on the plant floor and needs to create five subnets, each accommodating 25 endpoints. Which subnet mask needs to be configured?

A. 255.255.240.0
B. 255.255.255.128
C. 255.255.255.192
D. 255.255.255.224
E. 255.255.255.240
F. 255.255.255.248

Answer: D

NEW QUESTION 82
……

P.S. These New 200-601 Exam Questions Were Just Updated From The Real 200-601 Exam, You Can Get The Newest 200-601 Dumps In PDF And VCE From — https://www.passleader.com/200-601.html (88q VCE and PDF)

Good Luck!