Cloud Network Micro Segmentation GCAD Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a best practice for managing micro-segmentation policies over time?

   • ASet policies once and never change them
   • BAllow all traffic by default to avoid issues
   • CRegularly review and update policies to reflect changes in the application architecture
   • DUse the same policy for all environments (dev, test, prod)
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of micro-segmentation in a cloud network?

   • ATo create fine-grained security zones that isolate individual workloads and limit lateral movement
   • BTo replace the need for encryption between workloads
   • CTo provide a single firewall appliance for the entire cloud environment
   • DTo consolidate all workloads into a single flat network for easier management
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has implemented micro-segmentation using a distributed firewall. The security team wants to detect policy violations, such as a workload attempting to communicate with another workload that is not allowed. Which monitoring approach is most effective?

   • AMonitor network traffic with a packet analyzer to look for unusual patterns.
   • BRegularly review the firewall policy rules to ensure they are correct.
   • CEnable logging on the distributed firewall for all blocked traffic and set up alerts for repeated blocked attempts.
   • DUse a vulnerability scanner to identify open ports on workloads.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security architect is designing a zero-trust network for a multi-cloud environment. The company runs workloads in two different cloud providers and on-premises. They need to enforce micro-segmentation policies consistently across all environments. Which approach best achieves this while maintaining a single policy management plane?

   • AUse each cloud provider's native security groups and manage them separately.
   • BUse a VPN to connect all environments and rely on network ACLs.
   • CDeploy a third-party distributed firewall that supports multiple cloud providers and on-premises, with a central policy console.
   • DRoute all traffic through a central on-premises firewall for inspection and enforcement.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a zero trust architecture, what is the role of micro-segmentation?

   • ATo replace identity management systems
   • BTo provide a single sign-on experience for users
   • CTo enforce least-privilege access between workloads based on identity and context
   • DTo establish a trusted internal network zone
   Reveal Solution Discussion Select an answer first