2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A healthcare organization must comply with data privacy regulations that require strict access controls on patient data. They want to implement microsegmentation to help meet compliance. Which outcome of microsegmentation is most directly aligned with this compliance requirement?

   • AEliminating the need for encryption of patient data.
   • BEnsuring that all patient data is stored on-premises.
   • CReducing the number of security incidents by automatically patching vulnerabilities.
   • DProviding a clear audit trail of allowed communication paths between workloads that handle patient data.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What role does software-defined networking (SDN) play in microsegmentation?

   • AIt replaces the need for any firewall or security controls.
   • BIt provides a centralized control plane to dynamically enforce segmentation policies.
   • CIt encrypts all traffic between workloads automatically.
   • DIt physically separates workloads into different data centers.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In traditional network segmentation, policies are typically enforced at which point?

   • AAt the application layer using API gateways
   • BAt the individual workload or application level
   • CWithin the operating system of each server
   • DAt the network boundary between segments, such as on a firewall or router
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security architect is planning microsegmentation for a hybrid cloud environment where workloads run both on-premises and in a public cloud. They need a consistent policy enforcement mechanism across both environments. Which implementation approach is most suitable?

   • AUse a VPN to connect the environments and rely on the VPN gateway's firewall.
   • BUse a host-based firewall agent that is installed on each workload and managed centrally.
   • CDeploy a physical firewall in the on-premises data center and replicate rules manually to the cloud.
   • DConfigure separate firewall rules in each cloud provider's security groups.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common method for implementing microsegmentation?

   • AUsing a proxy server for all internet traffic
   • BConfiguring VLANs on physical switches
   • CDeploying a single perimeter firewall at the network edge
   • DUsing host-based firewalls on each workload
   Reveal Solution Discussion Select an answer first