Firewalls and Intrusion Detection CSE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary function of an Intrusion Detection System (IDS) in a cloud environment?

   • ATo encrypt traffic between cloud services
   • BTo automatically block malicious traffic
   • CTo replace the firewall in the network
   • DTo monitor network traffic and alert on suspicious activity
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is a key difference between security groups and network ACLs in cloud networking?

   • ASecurity groups are stateful, while network ACLs are stateless
   • BBoth are stateless
   • CBoth are stateful
   • DSecurity groups are stateless, while network ACLs are stateful
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A large enterprise runs a hybrid cloud environment with sensitive workloads in a VPC and on-premises data centers connected via VPN. The security team wants to detect lateral movement and data exfiltration across the hybrid network. They have budget constraints and cannot deploy a full mesh of virtual appliances. They also need to monitor encrypted traffic, but they cannot perform TLS interception due to compliance restrictions. Which deployment strategy should they choose?

   • AEnable full TLS interception at the firewall to inspect all encrypted traffic.
   • BDeploy a host-based IDS on every VM and on-premises server to monitor all activity.
   • CDeploy a network-based IDS at the VPC ingress/egress points and on the VPN gateway, using flow logs and metadata analysis to detect anomalies.
   • DDeploy a virtual IPS appliance in every subnet to block threats inline.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the principle of least privilege when designing firewall rules?

   • ADeny all traffic to ensure maximum security
   • BAllow all traffic by default and block specific threats
   • CAllow only the minimum necessary traffic and deny everything else
   • DUse the same rules for all subnets to simplify management
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which of the following attacks is a Web Application Firewall (WAF) specifically designed to mitigate?

   • AARP spoofing
   • BDNS cache poisoning
   • CSQL injection
   • DSYN flood
   Reveal Solution Discussion Select an answer first