Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is using a public cloud IaaS provider. The security team is responsible for securing the operating system of their virtual machines. Which security control should they implement to protect the VMs from network-based attacks?

   • ARely on the cloud provider's physical security controls.
   • BUse a honeypot to attract attackers.
   • CConfigure network security groups or firewall rules to restrict inbound and outbound traffic.
   • DEnsure the hypervisor is patched.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary function of an Intrusion Detection System (IDS)?

   • ATo monitor network traffic and generate alerts for suspicious activity
   • BTo block malicious traffic in real-time
   • CTo encrypt all network traffic
   • DTo replace a firewall in the network
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's security policy requires that known exploit attempts be stopped immediately before they reach internal servers. The security team wants a device that can inspect traffic in real-time and automatically drop malicious packets. Which technology should they deploy?

   • AHoneypot
   • BIntrusion prevention system (IPS)
   • CProxy server
   • DIntrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An administrator plans to run multiple virtual servers on a single physical host. Each virtual server belongs to a different business unit and must not communicate with each other. The administrator also wants to detect and block malicious traffic between virtual machines. Which two measures should be implemented?

   • APlace each VM on a different physical host and use a physical IPS.
   • BUse separate virtual switches with VLAN tagging and deploy a virtual IPS on the hypervisor.
   • CUse the default virtual switch and rely on the hypervisor's built-in firewall.
   • DUse a single virtual switch and configure the VMs with static IP addresses.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is moving a customer-facing web application to a public cloud provider. They must ensure that customer data is encrypted at rest and that all administrative access to the cloud resources is logged. According to the shared responsibility model, which tasks are the customer's responsibility?

   • AManaging the network infrastructure and firewall rules for the entire cloud region.
   • BEnsuring the cloud provider's compliance certifications are up to date.
   • CEncrypting the data stored in the cloud and enabling audit logging for administrative actions.
   • DPatching the hypervisor and securing the physical data center.
   Reveal Solution Discussion Select an answer first