Cloud Network Micro Segmentation GCAD Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A large enterprise is implementing micro-segmentation across multiple cloud accounts and on-premises data centers. The security team has limited staff and wants to reduce operational overhead while maintaining consistent policies. They also need to ensure that any policy change is auditable and reversible. Which implementation strategy best meets these requirements?

   • AUse a third-party agent on every workload that enforces policies locally, with no central management.
   • BDeploy a single on-premises firewall and route all cloud traffic through it.
   • CUse a centralized policy management platform that supports infrastructure-as-code and version-controlled policy definitions.
   • DConfigure each cloud account's native security groups independently, using a shared documentation spreadsheet.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security architect is evaluating a distributed firewall solution for a cloud environment that uses both VMs and containers. The solution must enforce policies based on workload identity and support dynamic workloads. Which feature is most important?

   • ACentralized logging of all traffic flows.
   • BSupport for deep packet inspection to detect application-layer threats.
   • CAbility to generate compliance reports for auditors.
   • DIntegration with orchestration platforms like Kubernetes to automatically apply policies to new workloads.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company plans to implement micro-segmentation in its cloud environment. The security team wants to minimize disruption to existing applications while ensuring that policies are effective. Which sequence of steps should the team follow?

   • AEnforce strict policies immediately, then review the logs to identify any blocked legitimate traffic.
   • BDisable all existing security groups, then create new micro-segmentation policies from scratch.
   • CDefine the application dependencies, create policies in monitor mode, analyze traffic logs, then enforce the policies.
   • DCreate policies based on the network architecture diagram, then deploy them in enforcement mode.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key characteristic of host-based segmentation?

   • AIt installs a firewall or security agent directly on each workload's operating system
   • BIt relies on a central firewall appliance to filter traffic
   • CIt requires a separate physical network for each segment
   • DIt uses the hypervisor to enforce policies between VMs
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which segmentation technique operates at the hypervisor layer and is often used to enforce policies between virtual machines on the same host?

   • ANetwork-based segmentation
   • BHypervisor-based segmentation
   • CHost-based segmentation
   • DApplication-based segmentation
   Reveal Solution Discussion Select an answer first