Managing Network Security GSLC Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is a key security benefit of software-defined networking (SDN)?

   • AIt eliminates the need for encryption
   • BIt provides physical isolation for all network segments
   • CCentralized control of network traffic enables dynamic security policy enforcement
   • DIt automatically patches all network devices
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A healthcare organization must comply with HIPAA, which requires protecting electronic protected health information (ePHI). The network team is designing a new network segment for a research application that will store ePHI. Which control is most directly required to meet HIPAA's security requirements?

   • AImplement network segmentation to isolate the ePHI systems from the rest of the network and restrict access to authorized personnel only.
   • BEnsure the network has a firewall that blocks all inbound traffic from the internet.
   • CDeploy an intrusion detection system that alerts on any suspicious activity.
   • DUse a network monitoring tool that logs all traffic and stores logs for at least one year.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which type of malware is specifically designed to spread from system to system without requiring user interaction?

   • ASpyware
   • BWorm
   • CTrojan horse
   • DRansomware
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A large enterprise is considering a zero trust architecture to replace its traditional perimeter-based security model. The network team is concerned about the impact on existing applications that rely on direct IP-based access between servers. Which implementation strategy best balances security improvement with operational continuity?

   • AImplement zero trust in phases, starting with identity-based access for user-to-application traffic, and gradually migrate server-to-server communications to micro-segmentation.
   • BKeep the existing perimeter firewall and add multi-factor authentication only for remote users.
   • CImmediately replace all network firewalls with software-defined perimeters and require all traffic to go through a cloud proxy.
   • DDeploy a network access control solution that blocks any device not compliant with the company's patch policy.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A regional bank is deploying a new customer-facing web application. The security team wants to isolate the web servers from the internal database servers so that a compromise of the web tier does not directly expose customer records. The solution must also allow the web servers to communicate with the database servers only on the required port. Which approach best meets these requirements?

   • APlace web servers in a DMZ subnet and database servers in an internal subnet, with a firewall rule allowing only the required port from the DMZ to the internal subnet.
   • BPlace database servers in the DMZ and web servers in the internal subnet, with a firewall rule allowing all traffic from the database subnet to the web subnet.
   • CPlace all servers in the same VLAN and use an intrusion prevention system to block any malicious traffic between them.
   • DPlace web servers and database servers in the same subnet and rely on host-based firewalls on each server.
   Reveal Solution Discussion Select an answer first