2.8 Apply Segmentation to a Network 350-201 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of auditing traffic flows between segments?

   • ATo identify which users are accessing the internet
   • BTo determine the physical location of devices
   • CTo measure network bandwidth usage for billing
   • DTo detect misconfigurations and unauthorized communication paths
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key characteristic of micro-segmentation?

   • AIt creates broad network segments based on IP subnets
   • BIt is only possible in on-premises data centers
   • CIt relies on separate physical switches for each security zone
   • DIt applies granular security policies to individual workloads or application components
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A small company has a single /24 subnet for all employees. They want to isolate the finance team's workstations from the rest of the company without purchasing new hardware. The finance team uses a legacy application that broadcasts to find a local print server. Which segmentation approach is most appropriate?

   • ACreate separate VLANs for finance and other employees, and configure the legacy application to use a unicast address for the print server.
   • BCreate a separate physical network for finance by installing a new switch and cabling.
   • CUse micro-segmentation with host-based firewalls on each finance workstation.
   • DPlace finance and other employees in the same VLAN but apply ACLs to block inter-host traffic.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network administrator is implementing segmentation between a production and a development environment. The environments are on different VLANs and the administrator wants to enforce the policy using a firewall. After configuring the firewall rules, what should the administrator do to ensure the rules are effective?

   • ARun a connectivity test from a production host to a development host and confirm that the traffic is blocked.
   • BReview the configuration of the VLANs to ensure they are on different subnets.
   • CEnable logging on the firewall rules and periodically review the logs for denied traffic.
   • DCheck the firewall's routing table to ensure that the VLANs are not directly connected.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which segmentation approach uses VLANs to separate traffic at Layer 2?

   • ACloud segmentation
   • BMicro-segmentation
   • CLogical segmentation
   • DPhysical segmentation
   Reveal Solution Discussion Select an answer first