A security architect is implementing four new policies - Measure 1 (M1), Measure 2 (M2), Measure 3 (M3) and Measure 4 (M4) - across three defined network zones: Secure (S), Restricted (R) and Public (P).
Each policy will be applied to at least one zone.
Further, each zone must have at lease one policy applied, and no more than 2 policies applied.
C1. Measure 1 (M1) must be applied to Secure (S) zone; Secure (S) zone may have one more measure; M1 may be applied to other zones (R & P).
C2. If Measure 2 (M2) is applied to Public (P) zone, then Measure 3 (M3) must also be applied to Public (P) zone. Public (P) zone will have either none of M2 & M3, M3 alone or M2 & M3 both applied.
C3. Measure 4 (M4) can not be applied to any zone to which Measure 1 (M1) is applied. Measure 4 (M4) is not applied to Secure (S) zone and any other zone to which Measure 1 (M1) is applied.
C4. If Measure 3 is applied to the Restricted zone, then Measure 1 must also be applied to the Restricted zone. Restricted (R) zone will either none of M3 & M1, M1 alone or M1 & M3 both.
Statements: -
1. Measure 2 & Measure 4 are both applied to the Public (P) zone, then no other policy can be applied to Public zone since max 2 policy limit is reached. But as per C2 above, If Measure 2 is applied to Public (P) zone, then Measure 3 must also be applied to Public zone. This condition is violated since Public zone can not have 3 policies.
CANNOT BE TRUE
2. If Measure 2 is applied to the Restricted zone, Measure 4 must be applied to Public zone.
Case1 :
Measure 1 - Secure
Measure 2 - Restricted
Measure 3 - Public
Measure 4 - Restricted
Case 2:
Measure 1 - Secure
Measure 2 - Restricted
Measure 3 - Public
Measure 4 - Public
There are multiple possibilities
3. As per C4, If Measure 3 is applied to the Restricted zone then Measure 1 must also be applied to Restricted zone, no other policy can be applied to Restricted zone since max 2 policies limit is reached. Measure 1 is applied to both Secure and Restricted zone, then Measure 1 can not be applied to Public zone. Measure 4 can not be applied to Secure zone as per C1 & C4 above. Measure 4 can not be applied to Restricted and Secure zones, then it must be applied to Public zone . Therefore, if Measure 3 is applied to Restricted zone, Measure 4 must be applied to Public zone.
MUST BE TRUE
There is no need to check other statement.
| CAN NOT BE TRUE | MUST BE TRUE |
| Measure 2 & Measure 4 are both applied to the Public zone | If Measure 3 is applied to Restricted zone then Measure 4 must be applied to the Public zone |