Network Segmentation and Perimeter Isolation NDE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security analyst is reviewing the effectiveness of a newly implemented segmentation scheme that uses VLANs and firewall zones. Which activity would provide the most reliable evidence that the segmentation is working as intended?

   • APerform a penetration test that attempts to move laterally from a compromised host in one zone to a host in another zone.
   • BCheck the VLAN assignment on each switch port to ensure devices are in the correct VLAN.
   • CReview the firewall rule base to confirm that the rules match the intended segmentation policy.
   • DMonitor network traffic for a day and look for any unexpected flows between zones.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which segmentation method uses IP address ranges to create separate network zones?

   • ASSID broadcasting
   • BSubnetting
   • CPort mirroring
   • DMAC filtering
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the purpose of access control testing in the context of network segmentation?

   • ATo assign IP addresses to devices
   • BTo increase the speed of the network
   • CTo verify that only authorized traffic is allowed between segments
   • DTo encrypt all data in transit
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security team has implemented a new segmentation scheme and wants to verify that it is effective. They have limited time and resources. Which verification method would provide the most value for the effort?

   • APerform a targeted penetration test that focuses on the most critical paths between zones.
   • BRun a network scanner to identify all open ports on each segment.
   • CMonitor network traffic for a week and analyze any cross-zone traffic.
   • DReview the firewall rule base and compare it to the intended policy.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security consultant is evaluating a company's network segmentation. The company has a flat network with no VLANs, and all servers and workstations are on the same subnet. The consultant recommends implementing segmentation to limit the attack surface. Which of the following is the most important first step?

   • AImmediately create VLANs for each department and configure the firewall to block all inter-VLAN traffic.
   • BEnable port security on all switches to prevent unauthorized devices from connecting.
   • CIdentify the critical assets and the required communication paths between them.
   • DPurchase a new firewall and place it between the servers and workstations.
   Reveal Solution Discussion Select an answer first