6.1 Explain the Configuration and Maintenance of Network Security for On-Premises, Cloud, and Hybrid Networks (e.g., Network Segmentation, Policies, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is designing a hybrid network with an on-premises data center and a cloud VPC. The security team wants to segment the network so that the HR department (on-premises) can access the HR application in the cloud, but the Finance department (on-premises) cannot. The cloud VPC has a single subnet for all applications. Which approach best meets the requirement?

   • APlace the HR application in a separate VPC and peer it with the on-premises network, but do not peer the Finance network.
   • BUse a single security group for all applications and allow all traffic from the on-premises network, relying on the application to enforce access control.
   • CUse security groups on the HR application instances, allowing inbound traffic only from the HR department's on-premises IP range.
   • DCreate separate subnets in the VPC for each application, and use network ACLs to restrict access based on source IP ranges.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary reason for carefully ordering security policies in a firewall rulebase?

   • ATo ensure that the most specific rules are evaluated first
   • BTo improve the overall network speed
   • CTo ensure that all rules are evaluated for every packet
   • DTo reduce the total number of rules required
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is investigating a potential data exfiltration incident. The Palo Alto Networks firewall has logging enabled on all security rules, and logs are forwarded to a SIEM. The analyst needs to find all outbound connections from a specific internal IP address to a specific external IP address over the past 24 hours. Which log type should the analyst query in the SIEM?

   • AConfiguration logs
   • BTraffic logs
   • CThreat logs
   • DSystem logs
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security operations center (SOC) analyst needs to detect when an internal user attempts to access a known malicious IP address. The traffic passes through a Palo Alto Networks firewall that is configured to forward logs to a SIEM. Which configuration is required on the firewall to ensure the SOC receives the necessary data?

   • AEnable logging on the security policy rule that permits the traffic, and configure the firewall to send traffic logs to the SIEM.
   • BEnable the 'deny' action on the rule and configure the firewall to send system logs to the SIEM.
   • CConfigure a packet capture on the firewall's dataplane interface and stream the capture to the SIEM.
   • DCreate a custom application signature for the malicious IP and apply it to a security rule.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When applying security policies across a hybrid network, what is a key consideration?

   • APolicies only apply to on-premises traffic, not cloud traffic
   • BPolicies should be applied consistently to enforce the same security posture across all environments
   • CPolicies must be identical in every location to be effective
   • DPolicies are automatically synchronized between all locations
   Reveal Solution Discussion Select an answer first