,
, IS 5403 Cybersecurity Week 6 Quizzes |
Questions & Correct Answers | Cybersecurity
Study Guide | 2026/2027 update.
Section 1: Defense-in-Depth & Zero-Trust Principles
(Questions 1–12)
1. An organization implements a zero-trust architecture but
continues to experience lateral movement after credential
compromise. Which control gap most directly undermines zero-trust
principles?
A) Lack of micro-segmentation and continuous authentication
B) Insufficient perimeter firewall throughput
C) Absence of a DMZ for public-facing services
D) Over-reliance on VPN for remote access
Correct Answer: A
Rationale: Zero-trust requires micro-segmentation and continuous
verification; without them, compromised credentials enable lateral
movement. Firewall throughput, DMZ, and VPN are perimeter-centric and do
not address internal trust assumptions .
Source: IS 5403 Cybersecurity Week 6 Quizzes Questions & Correct Answers
2026
2. During a TLS 1.3 handshake, a client receives a certificate with a
valid signature but the server later presents a different certificate
for the same session. Which security property is violated?
A) Forward secrecy
B) Certificate pinning
C) Handshake integrity
D) Session resumption
, IS 5403 Cybersecurity Week 6 Quizzes |
Questions & Correct Answers | Cybersecurity
Study Guide | 2026/2027 update.
Section 1: Defense-in-Depth & Zero-Trust Principles
(Questions 1–12)
1. An organization implements a zero-trust architecture but
continues to experience lateral movement after credential
compromise. Which control gap most directly undermines zero-trust
principles?
A) Lack of micro-segmentation and continuous authentication
B) Insufficient perimeter firewall throughput
C) Absence of a DMZ for public-facing services
D) Over-reliance on VPN for remote access
Correct Answer: A
Rationale: Zero-trust requires micro-segmentation and continuous
verification; without them, compromised credentials enable lateral
movement. Firewall throughput, DMZ, and VPN are perimeter-centric and do
not address internal trust assumptions .
Source: IS 5403 Cybersecurity Week 6 Quizzes Questions & Correct Answers
2026
2. During a TLS 1.3 handshake, a client receives a certificate with a
valid signature but the server later presents a different certificate
for the same session. Which security property is violated?
A) Forward secrecy
B) Certificate pinning
C) Handshake integrity
D) Session resumption
