In a shared responsibility model for cloud security, which task is typically the provider’s responsibility in SaaS?

Managing application updates and patches

How do APIs support secure communication between microservices?

They allow controlled, structured interactions

What is a key advantage of SD-WAN over traditional WANs?

It provides direct cloud connectivity

What should be done before repurposing a decommissioned SSD for internal reuse?

Overwrite the drive with a secure wipe tool

What is a major risk of centralized security management?

Higher risk of a single point of failure

What is the main purpose of cybersecurity insurance?

Transfers financial risk from cyber incidents

Which action minimizes an organization’s attack surface?

Disabling unused ports and services

How does load balancing improve fault tolerance?

It distributes traffic across multiple servers

How do containers improve security compared to traditional virtualization?

They limit application interaction through sandboxing

Why are security zones more effective than IP-based security policies?

They simplify security rule enforcement

What is required for VLANs to communicate with each other?

A Layer 3 device such as a router

What is a key security function of a Web Application Firewall (WAF)?

Blocking malformed HTTP requests

A network admin needs to segment traffic between departments while minimizing hardware costs. Which solution is best?

Configuring VLANs with inter-VLAN routing

An admin scans a server with Nmap and finds multiple unintentionally open ports. What is the best next step?

Close ports and disable remote access

How does EAP enhance network security?

It provides a flexible authentication framework

What is a major security challenge of hybrid cloud environments?

Inconsistent network protection across platforms

What is a primary benefit of a Unified Threat Management (UTM) device?

It simplifies security by combining multiple functions

Why is passive monitoring unsuitable for preventing attacks?

It only detects threats after they occur

What is the primary security benefit of enforcing least privilege?

Reduces lateral movement by attackers

Why is 802.1X commonly used in enterprise networks?

It prevents unauthorized devices from connecting

What is a primary security risk of a compromised jump server?

Attackers can bypass network segmentation

Why are collectors important in SIEM solutions?

They aggregate and centralize log data

What is the primary function of a VPN concentrator?

Encrypting and decrypting VPN connections

How does SDN improve network management in cloud environments?

Centralizes control for dynamic configuration

What is the primary purpose of IEEE 802.1X?

Port-based network access control

Why does SCADA/ICS require extreme segmentation?

To prevent unauthorized external access

A company enforces an allow list for applications. Which scenario would likely prevent an employee from running an app?

The app hash does not match an approved entry

What is a primary risk when integrating third-party cloud-based services?

Potential data leakage or unauthorized access

What is a primary security benefit of using SASE for remote access?

It places security controls close to cloud services

Which scenario best represents physical network isolation?

Two networks with no direct connection

Why might auto-updates for software not always be the best option?

They may conflict with organizational patch policies

What is a key difference between fail-open and fail-closed security models?

Fail-open allows traffic to flow during failure, fail-closed blocks it

studbud

Secure Infrastructure

45 termsStudBud Administration5 plays

Imported from external platform

Flashcards45 cardsFPractice quizPHost liveL

Questions 45

Answers

1
In a shared responsibility model for cloud security, which task is typically the provider’s responsibility in SaaS?
Configuring firewall rules for client applications
Managing application updates and patches
Securing customer authentication credentials
Enforcing user access policies
2
How do APIs support secure communication between microservices?
They remove the need for authentication
They replace all security controls with firewalls
They provide a single encrypted tunnel for all services
They allow controlled, structured interactions
3
What is a key advantage of SD-WAN over traditional WANs?
It provides direct cloud connectivity
It eliminates the need for VPNs
It requires on-premises security appliances
It only supports private networks
4
What should be done before repurposing a decommissioned SSD for internal reuse?
Overwrite the drive with a secure wipe tool
Perform a quick format
Format the drive using a standard file system
Encrypt the drive and leave it as is
5
Which method ensures logical separation of network traffic on the same switch
Air-gapped switches
SDN segmentation
VLANs
Static IP routing
6
What is a major risk of centralized security management?
Difficulty correlating security alerts
Increased cost of security appliances
Higher risk of a single point of failure
Lack of real-time log analysis
7
An admin configures an ACL allowing 192.168.1.0/24 access to ports 80, 443, and 8088. Which request will be blocked?
192.168.1.100 accessing TCP 8088
192.168.1.200 accessing TCP 80
192.168.1.50 accessing TCP 443
192.168.2.10 accessing TCP 80
8
Which endpoint security feature can automatically isolate an infected system?
SIEM correlation engine
IDS
Host-based firewall
EDR
9
What is the main purpose of cybersecurity insurance?
Prevents data breaches
Transfers financial risk from cyber incidents
Eliminates downtime from ransomware
Ensures regulatory compliance
10
Which device connection type is typically used by an IDS?
Inline monitoring
Passive monitoring
Direct enforcement
Stateful inspection
11
Which action minimizes an organization’s attack surface?
Deploying a honeypot in the DMZ
Allowing only encrypted VPN traffic
Disabling unused ports and services
Increasing password complexity
12
Why do data centers require specialized power infrastructure?
Compliance with cybersecurity laws
Continuous uptime requirements
Higher CPU processing demands
Large network bandwidth needs
13
Which security feature is unique to a Next-Generation Firewall (NGFW)?
Stateful packet inspection
Deep packet inspection
URL filtering
NAT functionality
14
How does load balancing improve fault tolerance?
It prevents application crashes
It distributes traffic across multiple servers
It restricts access to high-priority users
It encrypts inbound and outbound data
15
Which performance metric is most critical for interactive applications?
Encryption strength
Bandwidth
Responsiveness
Storage capacity
16
How do containers improve security compared to traditional virtualization?
They use full OS images for better isolation
They allow applications to share the same runtime
They limit application interaction through sandboxing
They require separate physical hardware
17
Which method prevents unauthorized applications from sending outbound traffic?
Host-based firewall
Endpoint Detection and Response
SIEM correlation
HIPS
18
Why are security zones more effective than IP-based security policies?
They eliminate untrusted networks
They simplify security rule enforcement
They require less network segmentation
They reduce the need for firewalls
19
What is required for VLANs to communicate with each other?
A Layer 3 device such as a router
A direct physical connection between VLANs
A firewall with VLAN-aware policies
Layer 2 switch with trunking enabled
20
What is a key security function of a Web Application Firewall (WAF)?
Preventing DNS spoofing
Load balancing web applications
Encrypting web traffic
Blocking malformed HTTP requests
21
A network admin needs to segment traffic between departments while minimizing hardware costs. Which solution is best?
Deploying multiple firewalls for each department
Implementing air-gapped physical networks
Configuring VLANs with inter-VLAN routing
Using subnetting without VLANs
22
An admin scans a server with Nmap and finds multiple unintentionally open ports. What is the best next step?
Restrict access using a firewall
Upgrade the OS to the latest version
Run a vulnerability scan against the server
Close ports and disable remote access
23
Which security measure ensures protection for data in transit across untrusted networks?
Network segmentation
Jump servers
IPsec tunnels
Honeypots
24
How does EAP enhance network security?
It restricts access based on MAC addresses
It assigns IP addresses dynamically
It encrypts all traffic sent over the network
It provides a flexible authentication framework
25
What is a major security challenge of hybrid cloud environments?
Lack of encryption for hybrid connections
Limited scalability compared to private clouds
Hybrid clouds do not support multi-factor authentication
Inconsistent network protection across platforms
26
Which monitoring method allows real-time traffic blocking?
Passive monitoring
Active monitoring
Network tapping
Access Monitoring
27
What is a primary benefit of a Unified Threat Management (UTM) device?
It automatically patches all network devices
It simplifies security by combining multiple functions
It eliminates the need for a firewall
It replaces the need for endpoint protection
28
Which security technology is considered a next-generation VPN solution for cloud services?
IPSec
MPLS
SDN
SASE
29
Which of the following does Endpoint Detection and Response NOT do?
File integrity monitoring
Behavioral analysis
Sandboxing
Quarantine files
30
Why is passive monitoring unsuitable for preventing attacks?
It only detects threats after they occur
It requires specialized encryption
It can only monitor encrypted traffic
It increases network latency
31
What is the primary security benefit of enforcing least privilege?
Simplifies user role management
Prevents phishing attacks
Increases software compatibility
Reduces lateral movement by attackers
32
Why is 802.1X commonly used in enterprise networks?
It automatically encrypts all network traffic
It eliminates the need for authentication databases
It replaces RADIUS and TACACS+ authentication
It prevents unauthorized devices from connecting
33
What is a primary security risk of a compromised jump server?
Attackers can bypass network segmentation
Proxies will stop functioning
VPN connections will become unencrypted
Load balancers will redirect traffic incorrectly
34
Why are collectors important in SIEM solutions?
They perform intrusion prevention
They encrypt all security logs
They aggregate and centralize log data
They analyze packet contents
35
What is the primary function of a VPN concentrator?
Load balancing network traffic
Blocking unauthorized user access
Filtering malicious web content
Encrypting and decrypting VPN connections
36
How does SDN improve network management in cloud environments?
Centralizes control for dynamic configuration
Reduces the need for firewalls
Eliminates VLAN complexity
Automates network traffic encryption
37
What is the primary purpose of IEEE 802.1X?
Port-based network access control
Encrypting network traffic
Preventing man-in-the-middle attacks
Assigning dynamic IP addresses
38
Why does SCADA/ICS require extreme segmentation?
To ensure all systems remain online
To improve authentication mechanisms
To allow real-time system updates
To prevent unauthorized external access
39
A company enforces an allow list for applications. Which scenario would likely prevent an employee from running an app?
The app runs from an approved directory
The app was installed before the policy was enforced
The app is signed by a trusted vendor
The app hash does not match an approved entry
40
What is a primary risk when integrating third-party cloud-based services?
Increased system performance overhead
Inability to scale services effectively
Potential data leakage or unauthorized access
Loss of encryption keys
41
What is a primary security benefit of using SASE for remote access?
It encrypts only inbound data traffic
It centralizes all network traffic through a single firewall
It places security controls close to cloud services
It requires manual VPN configuration for each session
42
Which scenario best represents physical network isolation?
Two networks with no direct connection
Customer A and B using separate virtual machines
Web and database servers separated by VLANs
A firewall restricting access between subnets
43
Why might auto-updates for software not always be the best option?
They may conflict with organizational patch policies
They can introduce zero-day vulnerabilities
They only apply to operating systems, not applications
They always require manual intervention
44
Which deployment method simplifies application rollout by automating provisioning?
Patch management
Manual configuration
Orchestration
Static routing
45
What is a key difference between fail-open and fail-closed security models?
Fail-open encrypts data, fail-closed decrypts it
Fail-open allows traffic to flow during failure, fail-closed blocks it
Fail-open is used only in passive monitoring
Fail-open blocks all traffic, fail-closed allows all traffic

Secure Infrastructure Flashcards | StudBud