Enterprise Virtual Network Security CND Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's virtual environment has a flat network where all VMs, including development and production, share the same subnet. A recent ransomware infection in the development environment spread to production. Which approach would BEST contain the spread in the future?

   • AIncrease logging on the virtual switch
   • BApply all patches to the hypervisor
   • CSegment development and production into separate virtual networks with firewall rules between them
   • DDeploy an antivirus agent on all VMs
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of using a centralized management console for virtual network security?

   • ATo automatically block all traffic that is not explicitly allowed.
   • BTo encrypt all data stored on virtual machines.
   • CTo replace the need for all other security controls.
   • DTo provide a single interface for configuring, monitoring, and responding to security events across the virtual network.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a common security risk when virtual machines are allowed to communicate directly with each other without any filtering or inspection?

   • ALateral movement
   • BDNS cache poisoning
   • CSYN flood
   • DMAC address spoofing
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A network defender is configuring an IDS for a virtual network. The IDS must detect attacks that occur between VMs on the same hypervisor. Where should the IDS be placed to capture this traffic?

   • AOn a virtual switch configured with port mirroring
   • BOn the hypervisor's management network
   • COn the physical network's core switch
   • DOn the internet gateway
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A network defender needs to detect malicious traffic between VMs on the same virtual switch that never crosses a physical firewall. Which monitoring approach is most effective for this east-west traffic?

   • AMonitor the physical switch's uplink ports
   • BReview firewall logs on the perimeter firewall
   • CUse SNMP polling on the hypervisor's management interface
   • DEnable port mirroring on the virtual switch to send traffic to an IDS
   Reveal Solution Discussion Select an answer first