INF2781 - Day 9

What is the main advantage of using a security group in cloud architecture compared to traditional firewall rules?

• Simplified configuration

• Remote control of firewall rules

• Reduces the risk of accidental exposure

• More efficient packet filtering

Which of the following is NOT a function of a NIDS (Network Intrusion Detection System)?

• Monitoring inbound packets

• Encrypting network traffic

• Alerting administrators of potential attacks

• Blocking suspicious IP addresses

In traditional network architecture, which layer is primarily responsible for protecting the internal network from external threats?

• Load balancer

• Virtual Private Network (VPN)

• Perimeter layer

• DMZ (DeMilitarized Zone)

What is a key reason corporations are moving away from perimeter-based network security?

• Difficulty in managing firewall rules

• Vulnerability due to compromised authentication credentials

• Increased cost of maintenance

• ncompatibility with cloud-based services

Which of the following best practices helps minimize the risk of network attacks in a cloud environment?

• Opening all ports on a server

• Running multiple network services on a single server

• Using a reverse proxy

• Allowing unrestricted direct access to databases

What is the purpose of a DMZ in network architecture?

• To provide a secure zone for external users to access internal servers

• To encrypt data traffic within the network

• To expose external-facing services to an untrusted network

• To manage load balancing across the network

How does a firewall in a cloud environment differ from a traditional firewall?

• It does not block traffic

• It operates based on physical hardware

• It uses security groups instead of physical devices

• It is less efficient in filtering traffic

What is the role of PEP (Policy Enforcement Points) in traditional network security?

• Acts as an interface for managing virtual servers

• Serves as the gatekeeper for network traffic

• Encrypts communication between servers

• Provides a user interface for configuring firewalls

Which of the following could result in full access to all servers within a network segment in traditional architectures?

• Misconfigured VPN

• Weak passwords

• Compromise of an individual server

• Poorly implemented load balancing

What is a major benefit of using multiple layers of security (multilayered defense) in a network architecture?

• It simplifies network design

• It eliminates the need for encryption

• It allows audit of the end-to-end communication

• It ensures data is only encrypted once