2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is choosing between traditional network segmentation and microsegmentation for a new application. They have a limited security team and need to minimize the effort required to maintain policies as the application scales. Which factor most strongly favors microsegmentation over traditional segmentation?

   • AMicrosegmentation eliminates the need for any firewall rules.
   • BTraditional segmentation provides better performance because it uses hardware-based filtering.
   • CTraditional segmentation requires more hardware, which is more expensive.
   • DMicrosegmentation policies can be defined once and automatically applied to new workloads based on their attributes.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In microsegmentation, what is the primary unit of segmentation?

   • AA physical server
   • BA data center rack
   • CAn individual workload or application
   • DA network subnet
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security architect is designing microsegmentation for a multi-tenant SaaS platform. Each tenant's workloads must be isolated from other tenants, but the platform uses shared infrastructure. Which approach best ensures tenant isolation while maintaining operational efficiency?

   • ACreate a separate VLAN for each tenant and manually manage firewall rules.
   • BUse host-based firewalls on each workload to enforce policies that restrict communication to only the required tenant-specific services.
   • CPlace all tenants in the same network segment and rely on application-level authentication.
   • DUse a single firewall rule that allows all traffic between workloads.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key benefit of microsegmentation?

   • AGuaranteed prevention of all external attacks
   • BElimination of all security vulnerabilities
   • CRemoval of the need for monitoring network traffic
   • DReduced blast radius in the event of a breach
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company currently uses VLANs to separate its application tiers. The security team wants to enforce policies based on application identity rather than IP address, and they need the policy to follow workloads when they move between hosts. Which approach best addresses this need?

   • AAssign static IP addresses to all workloads and write firewall rules based on those IPs.
   • BUse a next-generation firewall to inspect traffic between VLANs.
   • CCreate more VLANs so each application tier has its own isolated subnet.
   • DImplement microsegmentation using a software-defined networking (SDN) solution that attaches policies to workload identities.
   Reveal Solution Discussion Select an answer first