Securing a Data Center JN0-1103 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   What is a primary benefit of using automation for security policy management in a data center?

   • AIt eliminates the need for security monitoring
   • BIt guarantees that no security breaches will occur
   • CIt replaces the need for security architects
   • DIt reduces the time required to deploy and update security policies across many devices
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company operates two data centers in different regions and needs to securely replicate data between them over the public internet. The security team requires that the data be encrypted in transit and that only authorized data center networks can initiate the connection. Which solution should be used?

   • AUse a GRE tunnel between the data centers and rely on application-level encryption.
   • BSend the data over the internet using TLS, but do not restrict source IP addresses.
   • CUse a dedicated MPLS circuit from the service provider.
   • DEstablish a site-to-site IPsec VPN between the two data center edge firewalls.
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A cloud provider offers a multi-tenant data center where each customer runs virtual machines on shared infrastructure. The provider wants to ensure that a compromise in one customer's workload cannot affect another customer's workloads, even if they are on the same physical host. Which security control is most effective for this requirement?

   • ADeploy a single IPS at the data center core to monitor all traffic.
   • BImplement microsegmentation policies that restrict traffic between workloads based on customer and application identity.
   • CEncrypt all traffic between VMs using IPsec.
   • DAssign each customer a separate VLAN and rely on VLAN isolation.
   Reveal Solution Discussion Select an answer first