Which of the following is a PRIMARY benefit of network segmentation?

It eliminates the need for encryption

It increases the number of broadcast domains

It guarantees protection against all external threats

It reduces the attack surface by limiting lateral movement

A company is deploying a multi-tier application in a cloud environment. The application consists of a web tier, an application tier, and a database tier. The security team wants to ensure that if the web tier is compromised, the attacker cannot directly access the database tier. Which approach should be used?

Use VLANs to separate the tiers, but do not configure any inter-VLAN routing.

Implement micro-segmentation with security policies that allow only the application tier to communicate with the database tier.

Place all three tiers in the same subnet and rely on host-based firewalls on each tier.

Use a single firewall zone for all three tiers and configure ACLs to allow all traffic between them.

Systems Security Certified Practitioner

Domain 6Objective 4

6.4 - Manage Network Security SSCP Practice Questions (Page 2)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

8concepts

16%of the exam

Questions 6–10

6foundation · easy
Which of the following is a PRIMARY benefit of network segmentation?
Select an answer first
7foundation · easy
Which of the following protocols is SECURE for managing a network device remotely?
Select an answer first
8application · medium
A company is deploying a multi-tier application in a cloud environment. The application consists of a web tier, an application tier, and a database tier. The security team wants to ensure that if the web tier is compromised, the attacker cannot directly access the database tier. Which approach should be used?
Select an answer first
9foundation · easy
A network administrator wants to isolate guest Wi-Fi traffic from the corporate network using the same physical switch. Which technology should be used?
Select an answer first
10foundation · easy
A company wants to separate its finance department from the engineering department using separate physical switches and cabling. This approach is an example of which type of segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.4 - Manage Network Security SSCP Practice Questions (Page 2)

Questions 6–10

Which of the following is a PRIMARY benefit of network segmentation?

Which of the following protocols is SECURE for managing a network device remotely?

A network administrator wants to isolate guest Wi-Fi traffic from the corporate network using the same physical switch. Which technology should be used?

A company wants to separate its finance department from the engineering department using separate physical switches and cabling. This approach is an example of which type of segmentation?

Keep studying — Network and Communication Security