CASP: Chapter 4(2of2)

Which technique involves the logical division of a network into multiple subnetworks and is commonly used for network segmentation?

• Virtual LANs (VLANs)

• Virtual Private Network (VPN)

• Subnetting

• Intrusion Detection System (IDS)

Which segmentation technique utilizes two firewalls, with one placed on the external interface and the other on the internal interface of the DMZ, to control traffic flow between different network segments?

• Demilitarized Zone (DMZ)

• Virtual LANs (VLANs)

• Screened Subnet

• Intrusion Prevention System (IPS)

Which environment is typically utilized as a mirror of the production environment for testing changes to infrastructure, software, and/or data before implementing them in the production environment?

• Guest Environments

• Sandbox Environments

• Development Environments

• Staging Environments

What is the primary purpose of guest environments within an organization's network infrastructure?

• To serve as a testing environment for infrastructure changes

• To facilitate communication between internal and external networks

• To provide access to production services for visitors

• To offer isolated network access to visitors while minimizing potential security risks

Which networking concept is closely associated with providing anonymity due to the lack of a central authority and is often used for the distribution of files and anonymous network access?

• TOR (The Onion Router)

• Peer-to-Peer (P2P) Networks

• Jump Box

• Air Gap

Which type of host is not physically connected to any network and is surrounded by a monitored empty area to detect unauthorized attempts to approach the asset?

• Peer-to-Peer (P2P) Host

• Jump Box

• Air Gapped Host

• TOR (The Onion Router) Host

Which approach to network segmentation provides higher levels of security granularity and flexibility by isolating workloads from one another, particularly focusing on limiting 'east-west' traffic flows?

• Virtual Private Cloud (VPC)

• Microsegmentation

• Traditional Network Segmentation

• Software-Defined Networks (SDN)

Which cloud networking concept allows the creation of cloud resources within a private network environment, mirroring the functionality of resources in a traditional, privately operated data center?

• Software-Defined Networks (SDN)

• Virtual Private Cloud (VPC)

• Microsegmentation

• Traditional Network Segmentation

In a cloud environment, which networking component is used to control inbound and outbound traffic between Virtual Private Clouds (VPCs), providing very granular control but requiring manual provisioning due to its stateless nature?

• Regions

• Policies/Security Groups

• NAC Lists

• Availability Zones

Which networking component in a cloud environment acts as virtual firewalls associated with individual instances, limiting both inbound and outbound traffic, and can be configured to contain the same settings as NAC Lists for granular protection?

• Regions

• Policies/Security Groups

• Availability Zones

• NAC Lists