2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is comparing traditional network segmentation with microsegmentation for a new multi-tier application. They need to enforce different policies for each application component, even when components are in the same subnet. Which characteristic of microsegmentation makes this possible?

   • AIt requires all workloads to be in different VLANs.
   • BIt enforces policies at the workload level, allowing granular control regardless of subnet placement.
   • CIt uses a single firewall rule to cover all traffic in the subnet.
   • DIt relies on physical separation of servers to enforce security.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary characteristic of microsegmentation as a security technique?

   • AIt encrypts all traffic between workloads to prevent eavesdropping.
   • BIt separates a network into large, coarse-grained zones based on physical location.
   • CIt divides a network into isolated segments at the workload or application level.
   • DIt monitors network traffic for malicious patterns using intrusion detection.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is adopting a zero-trust architecture. They want to ensure that every workload only has the minimum access required to function, and they want to reduce the impact of a potential breach. Which use case does microsegmentation directly support?

   • AProviding a single sign-on solution for all users.
   • BMonitoring user behavior to detect insider threats.
   • CEncrypting all data at rest in the data center.
   • DEnforcing least-privilege access between workloads to reduce the blast radius of a compromise.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After a security incident, a company discovers that an attacker moved from a compromised web server to a database server using allowed network paths. The security team wants to prevent this type of east-west movement in the future. Which action is most aligned with the purpose of microsegmentation?

   • ADefine policies that allow only the specific communication needed between the web server and the database.
   • BApply the latest security patches to the web server.
   • CMove the database server to a different physical location.
   • DIncrease the logging level on the database server to capture more details.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A DevOps team is deploying a containerized application in a Kubernetes cluster. They want to ensure that if one container is compromised, the attacker cannot easily reach other containers in the same cluster. Which microsegmentation approach is best suited for this environment?

   • ARely on the container runtime's default settings to isolate workloads.
   • BPlace all containers in the same host network namespace to simplify communication.
   • CUse a traditional VLAN to separate the Kubernetes nodes.
   • DUse Kubernetes Network Policies to define which pods can communicate with each other.
   Reveal Solution Discussion Select an answer first