NEW
Font size
WorksheetsNetwork and Cloud Security Quiz
Total questions: 20
Worksheet time: 10mins
Which solution BEST meets the goal of separating database servers from public-facing web servers to reduce the risk of lateral movement in case of a breach?
VLAN segmentation with ACLs between zones
NAT overload on the web servers
Installing additional antivirus on all hosts
Using only Layer 2 switches
What control should be implemented to restrict physical port access to authorized devices when rogue devices are connecting to office Ethernet ports?
802.1X authentication with RADIUS
SSL inspection
Network address translation (NAT)
Content filtering
What network design principle is exemplified by a classified system that must never be connected to the internet, with updates delivered via encrypted USB drives?
VLAN trunking
Air-gapped isolation
VPN tunneling
Jump-server routing
Which concept does the setup demonstrate where a firewall sits at the internet border, an IDS is placed inside the internal LAN, and endpoint antivirus software runs on each workstation?
Single-point control
Defense in depth
MAC filtering
Fail-open architecture
Which type of control is being used when a network tap sends mirrored traffic to an IDS without interrupting live network flow?
Inline active control
Passive out-of-band control
Fail-close control
Active endpoint control
What type of security device is being used when a rule is configured to block all incoming TCP port 23 traffic from the internet?
Intrusion detection system
Firewall
Load balancer
Proxy server
Which solution should be deployed to not only detect attacks but also automatically block malicious traffic in real time?
IDS
IPS
SIEM
Proxy
What type of device should be implemented to combine a firewall, intrusion prevention, anti-malware, and content filtering into a single platform?
IDS
Load balancer
Unified Threat Management (UTM) appliance
Reverse proxy
Which feature provides resilience when a cloud service provider distributes web requests evenly across several backend servers and automatically removes a node from the pool when it fails a health check?
Source IP filtering
Heartbeat and health checks
SSL offloading
Weighted DNS routing
What principle is being used when an administrator manages a remote server farm using a separate network and a jump server for access, even when the production network is down?
Air-gapping
Out-of-band management
Port security
VPN segmentation
Which deployment model does it represent when a startup chooses to host its customer-facing app in a cloud environment shared with other organizations to minimize costs?
Private cloud
Community cloud
Public cloud
Hybrid cloud
What’s the biggest security challenge with a setup where a healthcare company processes patient data in its on-premises private cloud but uses a public cloud for web hosting, and the systems exchange sensitive data?
Cost management
User training
Data transfer and encryption between environments
Network latency
Who is responsible for managing physical access to a cloud data center in an IaaS environment?
The customer organization
The cloud service provider
A third-party contractor
The system administrator
Who owns the task of configuring database encryption and user access permissions for a hosted cloud app according to the responsibility matrix?
Cloud provider
Customer organization
Security auditor
Data center manager
What resiliency concept is being used when an enterprise deploys its virtual machines across multiple cloud zones within the same region to reduce downtime during localized outages?
Geo-redundant storage (GRS)
Local replication
High availability across zones
Cloud bursting
What technology is being used when a DevOps team deploys microservices in lightweight, isolated environments that share the same host OS kernel?
Virtual machines
Application virtualization
Containerization
Emulation
Which risk does the scenario best illustrate when a manufacturer connects hundreds of low-cost IoT sensors to monitor factory operations, and the devices start transmitting abnormal data to unknown IP addresses?
Insufficient memory capacity
Weak or missing security controls in IoT devices
Poor network segmentation
Misconfigured VPNs
Which term best describes devices like smart infusion pumps and heart monitors that run real-time operating systems for critical timing?
SCADA
Embedded systems
Hypervisors
Bastion hosts
Which concept is being implemented when a corporate network authenticates all devices and users—internal or external—before granting access?
Defense in depth
Least privilege
Zero Trust
Network Access Control
What architectural concept addresses the change when an organization realizes its traditional firewall-based perimeter no longer provides full protection after adopting remote work and cloud apps?
Deperimeterization
Edge computing
Virtual private cloud
Federated identity
