2.3 Explain the Purpose of Microsegmentation CYBERSECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A security analyst is explaining to management why microsegmentation is worth the effort. Management asks: 'How does this actually reduce our risk if an attacker gets into one server?' Which statement best answers the question?

   • AIt automatically patches the compromised server to close the vulnerability.
   • BIt prevents the attacker from moving laterally to other workloads by enforcing least-privilege access between them.
   • CIt encrypts all traffic between workloads so the attacker cannot read the data.
   • DIt blocks all inbound traffic from the internet to the compromised server.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company is deciding between traditional segmentation and microsegmentation for a new application that will be deployed in a public cloud. They need to ensure that policies can be updated quickly when the application scales. Which advantage of microsegmentation is most relevant to this requirement?

   • AMicrosegmentation requires fewer security professionals to manage.
   • BPolicies can be defined at the workload level and applied dynamically as new instances are created.
   • CTraditional segmentation provides better visibility into east-west traffic.
   • DTraditional segmentation is more secure because it uses hardware-based enforcement.
   Reveal Solution Discussion Select an answer first