2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a key difference between microsegmentation and traditional network segmentation?

   • AMicrosegmentation uses physical appliances as policy enforcement points, while traditional segmentation uses software.
   • BMicrosegmentation requires hardware changes, while traditional segmentation is purely software-based.
   • CMicrosegmentation provides finer granularity and adapts to dynamic environments, while traditional segmentation is coarser and more static.
   • DTraditional segmentation is only used in cloud environments, while microsegmentation is only used on-premises.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company wants to implement microsegmentation in its existing data center without changing the physical network topology. They need a solution that can create isolated segments over the current network infrastructure. Which implementation approach is most appropriate?

   • ADeploy an overlay network that encapsulates traffic and enforces policies at the virtual network layer.
   • BReplace all physical switches with new models that support VLAN tagging.
   • CUse a single flat network and rely on application-level authentication for security.
   • DInstall a firewall at the internet gateway and filter all inbound traffic.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of microsegmentation?

   • ATo replace the need for encryption in data centers
   • BTo simplify network management by consolidating security appliances
   • CTo reduce the attack surface by enforcing least-privilege access between workloads
   • DTo increase network throughput by optimizing routing paths
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial institution must demonstrate to auditors that customer data is only accessible to specific application components and that access is tightly controlled. They want to reduce the risk of a breach spreading between systems. Which benefit of microsegmentation directly supports this compliance requirement?

   • AReduced hardware costs by eliminating the need for firewalls.
   • BSimplified network design by using a single flat network.
   • CImproved compliance by enforcing least-privilege access between workloads, which provides auditable evidence of controlled data flows.
   • DEnhanced visibility by logging all user login attempts to the network.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is implementing microsegmentation using an overlay network. They are concerned about the performance impact of encapsulation on their latency-sensitive application. Which consideration is most important to address this concern?

   • ADisable all logging and monitoring to reduce overhead.
   • BEvaluate the overhead of the overlay protocol and ensure the underlying network has sufficient capacity.
   • CUse a traditional VLAN instead of an overlay to eliminate encapsulation overhead.
   • DIncrease the MTU on all servers to the maximum value.
   Reveal Solution Discussion Select an answer first