Securing a Data Center JN0-1103 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A large enterprise is designing a new data center firewall architecture. They need to support multiple business units, each with its own security policies, while maintaining high availability and the ability to scale firewall throughput as traffic grows. Which firewall design best meets these requirements?

   • AUse a single standalone firewall appliance for the entire data center.
   • BDeploy a pair of chassis-based firewalls in an active/passive HA configuration, with each business unit assigned to a separate virtual firewall instance.
   • CPlace a firewall only between the data center and the internet, and use ACLs on internal routers for inter-zone traffic.
   • DDeploy multiple physical firewalls, one per business unit, without HA.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which characteristic of data center traffic is most directly addressed by security designs that focus on east-west traffic?

   • ATraffic between virtual machines on different hosts within the same data center
   • BTraffic between the data center and a remote branch office over a VPN
   • CTraffic between the management network and the storage network
   • DTraffic entering the data center from the internet through the perimeter firewall
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How can orchestration improve security response in a data center?

   • ABy automatically coordinating security actions across multiple systems when a threat is detected
   • BBy disabling all security controls during an attack
   • CBy increasing the number of security alerts
   • DBy requiring manual intervention for every security event
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which data center security zone is typically used to host servers that are accessible from the internet?

   • ADMZ
   • BManagement zone
   • CInternal zone
   • DStorage zone
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A large enterprise is adopting a DevOps model where applications are deployed and scaled dynamically. The security team wants to enforce consistent security policies across the data center, but manual policy updates are too slow and error-prone. Which approach should be used to ensure security policies are applied automatically and consistently?

   • AUse an automation platform that integrates with the orchestration system to apply security policies based on workload tags and metadata.
   • BRequire the security team to manually update firewall policies whenever a new workload is deployed.
   • CUse a single permissive security policy for all workloads to avoid the need for updates.
   • DDeploy a firewall that only supports IP-based policies and require the network team to update them daily.
   Reveal Solution Discussion Select an answer first