Question 150
At the Nortonwood property management business, an organization places public web workloads identity servers and administrative systems in one unrestricted security zone. Which underlying issue most directly explains this situation?
Explanation
Correct Answer
The evidence indicates that mixed criticality zones permit compromise of public services to spread toward identity infrastructure. The appropriate response is to use a risk-based Cisco SAFE-inspired segmentation design with distinct trust boundaries and demonstrate that a web-server compromise simulation cannot initiate unauthorized identity-plane connections.
Incorrect Answers
Unprotected protocol control traffic can disturb forwarding infrastructure independent of user data ACLs. That is not the mechanism that accounts for the stated failure at the Nortonwood property management business.
The offered principle is: A completed HTTP request is not proof a network configuration was accepted. In the source material it is associated with: A completed HTTP request is not proof a network configuration was accepted. This case has a different controlling cause: Mixed criticality zones permit compromise of public services to spread toward identity infrastructure. Its keyed mechanism is: Mixed criticality zones permit compromise of public services to spread toward identity infrastructure.
Although unstructured threat lists lack standardized context and automated consumption, the presented symptoms do not support that as the primary cause; they indicate that mixed criticality zones permit compromise of public services to spread toward identity infrastructure. For the Nortonwood property management business, the direct corrective action is to use a risk-based Cisco SAFE-inspired segmentation design with distinct trust boundaries.