Enterprise Virtual Network Security CND Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security threat is particularly relevant to virtual network environments because it can allow an attacker to break out of a virtual machine and access the host system?

   • AMAC flooding
   • BDNS poisoning
   • CVM escape
   • DARP spoofing
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A network defender is configuring a virtual firewall for a DMZ. The firewall must allow inbound HTTPS to a web server, but the security team also wants to detect and block SQL injection attempts. Which approach is MOST effective?

   • AEnable deep packet inspection on the network firewall
   • BDeploy a web application firewall (WAF) in front of the web server in addition to the network firewall
   • CConfigure the network firewall to block all inbound traffic except HTTPS
   • DUse an IDS on the same segment as the web server
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A network defender is assessing the security of a virtual network that hosts multiple VMs on a single hypervisor. Which threat is most directly associated with the shared nature of the underlying physical infrastructure?

   • AA VM escape vulnerability that allows an attacker to break out of the VM and access the hypervisor or other VMs.
   • BA misconfigured DNS server that fails to resolve internal hostnames.
   • CA rogue access point installed by an insider on the physical network.
   • DA distributed denial-of-service (DDoS) attack targeting the external IP address of the virtual network.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which monitoring technique is used to capture and analyze network traffic in a virtual network to detect anomalies?

   • AVulnerability scanning
   • BLog aggregation
   • CConfiguration management
   • DPacket capture
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A network defender is explaining to management why a virtual network is more flexible than a physical network for implementing micro-segmentation. What is the key advantage of virtual networking in this context?

   • AVirtual networks eliminate the need for firewalls because the hypervisor is inherently secure.
   • BVirtual networks automatically encrypt all traffic between VMs.
   • CSecurity policies can be applied to logical groups of VMs and moved with them, independent of physical cabling.
   • DVirtual networks require no monitoring because traffic is isolated from the physical network.
   Reveal Solution Discussion Select an answer first