Cloud Network Micro Segmentation GCAD Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   A cloud architect must choose a segmentation method for a mixed environment: some workloads run on VMs, some on bare-metal servers, and some in containers. The requirement is to enforce consistent security policies across all workloads regardless of the underlying infrastructure. Which approach is most appropriate?

   • AHypervisor-based segmentation using the hypervisor's distributed firewall.
   • BA combination of network and hypervisor-based segmentation, but only for VMs.
   • CHost-based segmentation using agents installed on each operating system.
   • DNetwork-based segmentation using VLANs and ACLs on the physical switches.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   How does micro-segmentation align with the zero trust principle of 'never trust, always verify'?

   • AIt requires authentication and authorization for every connection, regardless of source location
   • BIt relies on a single strong password for all workloads
   • CIt only verifies traffic that crosses the cloud provider's perimeter
   • DIt trusts all traffic within the same subnet by default
   Reveal Solution Discussion Select an answer first