CASP+: Cloud Based Network Segmentation Quiz

What does microsegmentation describe?

• Allowing unlimited traffic between workloads

• Isolating workloads from one another and protecting them individually

• Focusing on protecting client-to-server interactions

• Combining workloads to increase security levels

What is the main difference between microsegmentation and traditional network segmentation?

• Microsegmentation focuses on north-south traffic

• Traditional network segmentation is cloud-centric

• Traditional network segmentation is more cost-effective

• Microsegmentation provides higher security granularity and flexibility

What are NAC Lists used for in a cloud environment?

• Automatically provision default NACLs

• Define traffic flows into a VPC

• Manage virtual firewalls for individual instances

• Control inbound and outbound traffic between networks

What do Security Groups (SG) do in cloud computing?

• Manage data zones in a data lake

• Automatically assign default NACLs

• Control traffic flows into a VPC

• Limit inbound and outbound traffic for individual instances

What do Regions describe in a globally distributed cloud?

• Physical location of data centers

• State and location of data

• Data transitions from raw storage to analytical use

• Collection of data centers within a geographic area

What is the purpose of Data Zones in a data lake?

• Isolate and protect data from unauthorized use

• Manage big data used by analysts

• Define traffic flows between VPCs

• Control inbound and outbound traffic

What is the characteristic of NAC Lists in a cloud environment?

• Associated with individual instances

• Automatically provisioned by cloud platforms

• Stateful, allowing traffic flows without explicit definitions

• Stateless, meaning both inbound and outbound traffic flows must be explicitly defined

How do Security Groups (SG) and NACLs work together?

• Create granular protections

• Automatically assign default configurations

• Limit traffic between workloads

• Manage data zones in a data lake

What do Data Zones provide in a data lake?

• Clear boundaries between data types

• Isolation of workloads

• State and location of data

• Automated data processing

What is the purpose of a Virtual Private Cloud (VPC) or Virtual Network (VNET)?

• Isolation of workloads

• Control of inbound and outbound traffic

• Creation of cloud resources within a private network

• Automated data processing