Network Isolation and Segmentation CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a primary benefit of network isolation in a cloud environment?

   • AIt automatically patches all vulnerabilities in the network infrastructure.
   • BIt eliminates the need for encryption of data in transit.
   • CIt guarantees that no external traffic can ever reach the cloud environment.
   • DIt reduces the attack surface by limiting the paths an attacker can use to reach resources.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which strategy is used to enforce security boundaries by dividing a network into smaller, isolated segments?

   • ANetwork segmentation
   • BPatch management
   • CData encryption
   • DIdentity management
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security auditor is evaluating the effectiveness of network segmentation in a cloud environment. The auditor wants to verify that a breach in the web tier cannot reach the database tier. Which monitoring or auditing method would provide the most direct evidence?

   • ACheck the CPU utilization of the database instances to detect unusual activity.
   • BVerify that the database tier is in a different availability zone than the web tier.
   • CReview the DNS logs to see if the database hostname is being resolved by the web tier.
   • DReview the security group rules for the database tier to confirm that only the application tier is allowed.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is deploying a microservices application on Kubernetes in a cloud environment. The security team wants to enforce network segmentation between microservices so that only specific services can communicate with each other. Which approach provides the most granular control?

   • APlace all microservices in the same subnet and rely on security groups to filter traffic between them.
   • BUse network ACLs on the subnets to restrict traffic between pods.
   • CUse Kubernetes NetworkPolicies to define ingress and egress rules between pods based on labels.
   • DCreate a separate VPC for each microservice and use VPC peering to connect them.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is deploying a multi-tenant SaaS application. Each tenant's data must be isolated from other tenants. The application runs on a shared infrastructure, and the network team wants to ensure that tenant A cannot access tenant B's resources. Which approach provides the strongest isolation?

   • AUse a single VPC with separate security groups for each tenant.
   • BUse a single VPC with separate subnets for each tenant and rely on security groups.
   • CUse a single VPC and rely on application-level authentication to prevent cross-tenant access.
   • DUse a separate VPC for each tenant and do not peer them.
   Reveal Solution Discussion Select an answer first