2.2 Explain External (north-South) and Internal (east-West) Traffic Flow Patterns for Environments CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which scenario best illustrates east-west traffic?

   • AA web server sends a database query to a database server in the same data center
   • BA laptop downloads a file from an FTP server on the internet
   • CA router exchanges routing updates with an ISP router
   • DA remote employee connects to the corporate network via VPN
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   During a security incident, an analyst sees a spike in traffic from an internal server to an external IP. The analyst also notices that the server is communicating with several other internal servers. The analyst must determine if this is a data exfiltration or a normal application behavior. Which approach is most effective?

   • AAnalyze the north-south traffic to the external IP and correlate it with east-west traffic patterns.
   • BIgnore the east-west traffic and focus only on the north-south traffic.
   • CAssume it is normal because the server is internal.
   • DBlock all outbound north-south traffic immediately.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team is implementing security controls in a cloud environment with many VMs. They want to limit the ability of an attacker to move from one VM to another if one is compromised. Which approach is most effective?

   • ADeploy a firewall at the internet gateway.
   • BMonitor only north-south traffic.
   • CImplement micro-segmentation to control east-west traffic.
   • DUse a VPN for all VM communications.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why does east-west traffic increase in virtualized and cloud environments?

   • ABecause all traffic must pass through a centralized perimeter
   • BBecause clients access servers from the internet
   • CBecause network management protocols are used more frequently
   • DBecause inter-VM communication and microservices architectures generate lateral traffic
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network administrator is troubleshooting a performance issue. Users report slow access to an external cloud application, but internal server-to-server communication is fast. The administrator wants to focus on the traffic that is causing the issue. Which traffic flow should the administrator analyze first?

   • AOnly the traffic from the cloud application to the users.
   • BNorth-south traffic, because users are accessing an external application.
   • CBoth north-south and east-west traffic equally.
   • DEast-west traffic, because it is internal and fast.
   Reveal Solution Discussion Select an answer first