問題文
A cost-saving plan would move a large and detailed filtering rule set onto an existing router and would also have the security device answer web requests for a small internal site. Which principle does that plan run against?
選択肢
- The capabilities of the device are to be written down, because a router asked to filter has limits that the planning document does not record and the small web page then fails without warning.
- Internal threats are to be given attention, because a router that carries filtering looks outward only and the internal site then has nothing in front of it.
- Defense in depth is to be created, because a router that carries filtering removes one of the layers, and the internal site and its records then sit behind a single layer only.
- Devices are to be used as they were meant to be used, because a router is meant to route rather than to carry highly complex filtering, and a security device is not meant to serve any function unrelated to security.