2.2 Configuring Boundary Segmentation PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a VPC network with multiple subnets. They want to ensure that resources in one subnet cannot communicate with resources in another subnet, except for specific ports. They have created firewall rules to allow specific traffic. What is a best practice they should follow?

   • AUse the principle of least privilege by creating firewall rules that only allow the necessary traffic, and deny all other traffic by default.
   • BUse Shared VPC to create separate subnets for each tier, and then rely on the default deny rules.
   • CCreate firewall rules that allow all traffic between subnets, and then use VPC peering to isolate them.
   • DUse the default firewall rules that allow all traffic within the network, and rely on IAM to restrict access.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which technology can be used to encapsulate and encrypt traffic between two VPC networks?

   • ACloud DNS
   • BCloud VPN
   • CVPC peering
   • DCloud Load Balancing
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following can be used as a source or destination in a VPC firewall rule?

   • AIP ranges, tags, and service accounts
   • BOnly service accounts
   • COnly network tags
   • DOnly IP ranges
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key limitation of VPC peering that you must consider when designing network connectivity?

   • AVPC peering is transitive, so if network A is peered to B and B to C, A can communicate with C.
   • BVPC peering cannot be used to connect networks in different projects.
   • CVPC peering does not support communication between networks in different regions.
   • DVPC peering does not allow you to control which subnets are shared.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of an access level in VPC Service Controls?

   • ATo define the billing account for the services.
   • BTo define the encryption keys for the services.
   • CTo define the firewall rules for the VPC network.
   • DTo define the conditions under which clients are allowed to access the protected services.
   Reveal Solution Discussion Select an answer first