4.1 Identify and Describe Major Cloud Architectures and Topologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security architect is reviewing a cloud environment that uses a hub-and-spoke topology. The hub contains shared services like firewalls and logging, and each spoke contains a workload. A workload in one spoke needs to communicate with a workload in another spoke. What is the most secure way to enable this communication?

   • AAllow the spokes to communicate directly via the internet
   • BPlace both workloads in the same spoke
   • CRoute the traffic through the hub so it passes through the centralized firewall
   • DCreate a direct VPC peering connection between the two spokes
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a cloud virtual network, what is the primary purpose of dividing the network into subnets?

   • ATo increase the total number of available IP addresses in the virtual network
   • BTo provide a direct physical connection to the cloud provider's data center
   • CTo automatically encrypt all traffic between virtual machines
   • DTo enable segmentation and control traffic flow between different parts of the network
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A cloud architect is designing a three-tier application in a cloud VPC. The web tier must be reachable from the internet, the application tier must only be reachable from the web tier, and the database tier must only be reachable from the application tier. Which topology best meets these requirements?

   • ACreate three separate subnets and use network access control lists (ACLs) or security groups to restrict traffic between them
   • BPlace the web tier in a public subnet and the application and database tiers in a single private subnet
   • CPlace all three tiers in the same subnet and rely on host-based firewalls on each VM
   • DUse one subnet but create a separate VPC for each tier and peer them together
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the shared responsibility model for Infrastructure as a Service (IaaS), which of the following is typically the customer's responsibility?

   • AManaging the hypervisor
   • BPatching the operating system of virtual machines
   • CReplacing failed physical hardware
   • DPhysical security of the data center
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In the shared responsibility model, which service model places the least security responsibility on the customer?

   • AFunction as a Service (FaaS)
   • BPlatform as a Service (PaaS)
   • CInfrastructure as a Service (IaaS)
   • DSoftware as a Service (SaaS)
   Reveal Solution Discussion Select an answer first