2.2 Explain External (north-South) and Internal (east-West) Traffic Flow Patterns for Environments CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is planning to deploy a multi-tier application in a virtualized environment. The web tier, application tier, and database tier will be on separate VMs. The security team is concerned about an attacker moving from the web tier to the database tier. Which security measure is most directly applicable?

   • AA perimeter firewall to inspect north-south traffic.
   • BAn intrusion detection system on the internet connection.
   • CA VPN for remote access.
   • DMicro-segmentation to control east-west traffic between tiers.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a hybrid environment: a traditional data center and a public cloud. The data center hosts a legacy application that is accessed by external customers. The cloud hosts a microservices application. The security team has limited budget and must choose where to focus security controls. Which approach best balances the need to protect both north-south and east-west traffic?

   • AImplement micro-segmentation in the cloud and a perimeter firewall in the data center.
   • BDeploy micro-segmentation in the data center and a perimeter firewall in the cloud.
   • CDeploy a strong perimeter firewall in the data center and rely on the cloud provider's default security for the cloud.
   • DFocus all security budget on the data center because it is on-premises.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of east-west traffic?

   • ATwo virtual machines on the same hypervisor exchange data for a distributed application
   • BA network administrator uses SSH to configure a router from a management workstation
   • CAn application server communicates with a payment gateway on the internet
   • DA user in the office accesses a cloud-based email service
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary role of a perimeter firewall in relation to north-south traffic?

   • ATo protect the network boundary by filtering traffic entering and leaving
   • BTo monitor traffic between virtual machines
   • CTo segment internal application tiers
   • DTo encrypt data at rest on servers
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which characteristic is typical of traffic flow in a traditional data center?

   • ATraffic is evenly distributed between north-south and east-west
   • BMost traffic enters and leaves through a centralized perimeter
   • CTraffic flows directly between application tiers without passing through a firewall
   • DMost traffic stays between virtual machines on the same host
   Reveal Solution Discussion Select an answer first