6V0-21.25 practice question 5 of 10
Which of the following are important components to cyber security design? (Select all that apply)
Full set: 75 questionsA comprehensive cybersecurity design is built on foundational pillars that ensure a defense-in-depth strategy. These pillars align with industry-standard frameworks like the NIST Cybersecurity Framework.
1. Proactive Protection: Involves implementing controls to prevent security incidents. For vSphere, this includes features like Secure Boot, VM Encryption, and firewalling.
2. Deep Visibility: The ability to detect threats by monitoring the environment. This is achieved through extensive logging, auditing, and integration with security information and event management (SIEM) systems.
3. Recovery: The capacity to restore services and data after an incident, ensuring business continuity. This is a critical component of resilience, supported by technologies like vSphere Replication and robust backup solutions. These three components represent a holistic lifecycle approach to security.
D. Kernel remediation and upgrade: This is a specific, operational task that falls under the broader category of 'Proactive Protection', not a foundational design component on its own.
1. VMware vSphere Product Documentation, "vSphere Security": This official documentation outlines the security architecture of vSphere 7, which is built on principles of securing the infrastructure (Protection), providing operational transparency (Visibility), and ensuring availability and resilience (Recovery). The guide details features that map directly to these components. (See the overview sections of the vSphere 7 Security Guide).
2. NIST Special Publication 800-53, Revision 5, "Security and Privacy Controls for Information Systems and Organizations": This foundational cybersecurity standard, widely referenced in academic and professional settings, organizes security controls into families that support core functions including Protection, Detection (enabled by Visibility), and Recovery.
3. VMware White Paper, "Intrinsic Security for the Modern Data Center": This paper details VMware's security philosophy, which emphasizes a three-pronged approach: better protection for applications, comprehensive visibility into threats, and automated threat response and recovery. This directly supports the chosen answers as core components of VMware's security design. (See section: "A New Approach to Data Center Security").
Keep practicing
Take the free 6V0-21.25 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 6V0-21.25 practice questions
- Question 1Which of the following is true regarding VMware vDefend security solutions?
- Question 2What is the recommended Gateway Firewall edge size for production environments?
- Question 3Which component is responsible for maintaining the flow state table for active traffic fl…
- Question 4Which of the following is true regarding the VMware vDefend Distributed Firewall?
- Question 6Which of the following is not an available option for membership criteria selection when …
- Question 7Which of the following are valid Network Traffic Analysis detectors in vDefend ATP? (Sele…
