Network Segmentation N10-009 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security administrator wants to limit the lateral movement of an attacker within a data center. They plan to apply security policies to individual workloads, such as allowing only the application server to communicate with the database server on a specific port. Which segmentation approach is this?

   • ADMZ segmentation
   • BMicrosegmentation
   • CVLAN segmentation
   • DSubnet segmentation
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of a Demilitarized Zone (DMZ) in network segmentation?

   • ATo host services that are accessible from the internet while protecting the internal network
   • BTo store backup data offline
   • CTo provide a secure area for internal employees to work
   • DTo replace the need for a firewall
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the impact of subnetting on broadcast traffic?

   • AIt has no effect on broadcast traffic
   • BIt reduces the scope of broadcast traffic by limiting it to the subnet
   • CIt increases the size of broadcast domains
   • DIt eliminates all broadcast traffic
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Besides security, what is another benefit of network segmentation?

   • AIt improves performance by reducing broadcast domains and localizing traffic
   • BIt automatically encrypts all data transmitted on the network
   • CIt reduces the need for IP addressing entirely
   • DIt guarantees unlimited bandwidth for all users
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An administrator has set up VLANs for different departments. They want to allow the HR VLAN to access the printer VLAN, but block the sales VLAN from accessing the printer VLAN. Where should the administrator configure these rules?

   • AOn the router or Layer 3 switch that performs inter-VLAN routing
   • BOn the DHCP server
   • COn the printer itself
   • DOn each access switch port assigned to the VLANs
   Reveal Solution Discussion Select an answer first