2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company runs a three-tier web application in a private cloud. After a breach, the security team wants to prevent an attacker who compromises the web tier from reaching the database tier. They need a solution that enforces policies per workload, not just per subnet. Which approach best meets this requirement?

   • APlace the web and database tiers in the same subnet and rely on the cloud provider's default security group rules.
   • BUse a traditional network firewall to filter traffic between the web and database subnets.
   • CConfigure the database to accept connections only from the web server's IP address.
   • DDeploy a host-based firewall on each VM and define allow rules only for the specific ports and protocols each workload needs.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does microsegmentation help contain a security breach?

   • ABy encrypting all data at rest and in transit
   • BBy blocking all inbound traffic from the internet
   • CBy preventing an attacker from moving laterally to other workloads
   • DBy automatically patching vulnerable workloads
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a typical use case for microsegmentation?

   • AReplacing the need for antivirus software
   • BSecuring multi-tier applications by isolating each tier
   • CBacking up data to an offsite location
   • DProviding load balancing for web servers
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is implementing microsegmentation in a data center that hosts both legacy and modern workloads. The legacy workloads cannot have agents installed, but the modern workloads can. They need to enforce consistent security policies across all workloads. Which approach best meets this constraint?

   • AUse only network-based policies for all workloads, ignoring the need for workload-level granularity.
   • BMove all legacy workloads to a separate network segment and apply no policies.
   • CForce installation of agents on legacy workloads even though they are unsupported.
   • DUse a hybrid approach: host-based agents for modern workloads and network-based policies for legacy workloads.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is evaluating microsegmentation to reduce the risk of a ransomware attack spreading across their data center. They have a mix of virtual and physical servers. They need to ensure that even if one server is infected, the ransomware cannot easily encrypt other servers. Which consideration is most important for this goal?

   • AFocusing only on internet-facing servers because they are the most likely entry point.
   • BUsing a single firewall rule to allow all traffic between servers for simplicity.
   • CEnsuring that all servers have the latest antivirus signatures.
   • DEnforcing least-privilege access between all servers, regardless of whether they are virtual or physical.
   Reveal Solution Discussion Select an answer first