What should be done before repurposing a decommissioned SSD for internal reuse?

Overwrite the drive with a secure wipe tool

How does EAP enhance network security?

It provides a flexible authentication framework

Why is 802.1X commonly used in enterprise networks?

It prevents unauthorized devices from connecting

In a shared responsibility model for cloud security, which task is typically the provider’s responsibility in SaaS?

Managing application updates and patches

What is a key security function of a Web Application Firewall (WAF)?

Blocking malformed HTTP requests

Which action minimizes an organization’s attack surface?

Disabling unused ports and services

Why are security zones more effective than IP-based security policies?

They simplify security rule enforcement

Why are collectors important in SIEM solutions?

They aggregate and centralize log data

How does SDN improve network management in cloud environments?

Centralizes control for dynamic configuration

How do containers improve security compared to traditional virtualization?

They limit application interaction through sandboxing

What is required for VLANs to communicate with each other?

A Layer 3 device such as a router

What is a primary security risk of a compromised jump server?

Attackers can bypass network segmentation

Why might auto-updates for software not always be the best option?

They may conflict with organizational patch policies

What is a key advantage of SD-WAN over traditional WANs?

It provides direct cloud connectivity

What is the primary purpose of IEEE 802.1X?

Port-based network access control

What is the primary security benefit of enforcing least privilege?

Reduces lateral movement by attackers

How do APIs support secure communication between microservices?

They allow controlled, structured interactions

What is a primary risk when integrating third-party cloud-based services?

Potential data leakage or unauthorized access

How does load balancing improve fault tolerance?

It distributes traffic across multiple servers

Why does SCADA/ICS require extreme segmentation?

To prevent unauthorized external access

What is the primary function of a VPN concentrator?

Encrypting and decrypting VPN connections

What is a primary benefit of a Unified Threat Management (UTM) device?

It simplifies security by combining multiple functions

Which scenario best represents physical network isolation?

Two networks with no direct connection

A company enforces an allow list for applications. Which scenario would likely prevent an employee from running an app?

The app hash does not match an approved entry

What is a major security challenge of hybrid cloud environments?

Inconsistent network protection across platforms

What is a key difference between fail-open and fail-closed security models?

Fail-open allows traffic to flow during failure, fail-closed blocks it

What is a primary security benefit of using SASE for remote access?

It places security controls close to cloud services

Why is passive monitoring unsuitable for preventing attacks?

It only detects threats after they occur

An admin scans a server with Nmap and finds multiple unintentionally open ports. What is the best next step?

Close ports and disable remote access

What is a major risk of centralized security management?

Higher risk of a single point of failure

A network admin needs to segment traffic between departments while minimizing hardware costs. Which solution is best?

Configuring VLANs with inter-VLAN routing

What is the main purpose of cybersecurity insurance?

Transfers financial risk from cyber incidents

studbud

Secure Infrastructure

45 termsStudBud Administration5 plays

Imported from external platform

Flashcards45 cardsFPractice quizPHost liveL

Questions 45

Answers

1
What should be done before repurposing a decommissioned SSD for internal reuse?
Encrypt the drive and leave it as is
Overwrite the drive with a secure wipe tool
Perform a quick format
Format the drive using a standard file system
2
How does EAP enhance network security?
It provides a flexible authentication framework
It encrypts all traffic sent over the network
It restricts access based on MAC addresses
It assigns IP addresses dynamically
3
Why is 802.1X commonly used in enterprise networks?
It eliminates the need for authentication databases
It prevents unauthorized devices from connecting
It replaces RADIUS and TACACS+ authentication
It automatically encrypts all network traffic
4
In a shared responsibility model for cloud security, which task is typically the provider’s responsibility in SaaS?
Enforcing user access policies
Securing customer authentication credentials
Configuring firewall rules for client applications
Managing application updates and patches
5
What is a key security function of a Web Application Firewall (WAF)?
Preventing DNS spoofing
Load balancing web applications
Encrypting web traffic
Blocking malformed HTTP requests
6
Which action minimizes an organization’s attack surface?
Allowing only encrypted VPN traffic
Disabling unused ports and services
Deploying a honeypot in the DMZ
Increasing password complexity
7
Why are security zones more effective than IP-based security policies?
They reduce the need for firewalls
They eliminate untrusted networks
They simplify security rule enforcement
They require less network segmentation
8
Why do data centers require specialized power infrastructure?
Compliance with cybersecurity laws
Large network bandwidth needs
Higher CPU processing demands
Continuous uptime requirements
9
Why are collectors important in SIEM solutions?
They aggregate and centralize log data
They perform intrusion prevention
They analyze packet contents
They encrypt all security logs
10
How does SDN improve network management in cloud environments?
Reduces the need for firewalls
Automates network traffic encryption
Eliminates VLAN complexity
Centralizes control for dynamic configuration
11
Which device connection type is typically used by an IDS?
Direct enforcement
Passive monitoring
Inline monitoring
Stateful inspection
12
Which performance metric is most critical for interactive applications?
Responsiveness
Encryption strength
Bandwidth
Storage capacity
13
How do containers improve security compared to traditional virtualization?
They limit application interaction through sandboxing
They require separate physical hardware
They use full OS images for better isolation
They allow applications to share the same runtime
14
What is required for VLANs to communicate with each other?
A Layer 3 device such as a router
A firewall with VLAN-aware policies
Layer 2 switch with trunking enabled
A direct physical connection between VLANs
15
What is a primary security risk of a compromised jump server?
Proxies will stop functioning
Load balancers will redirect traffic incorrectly
Attackers can bypass network segmentation
VPN connections will become unencrypted
16
Why might auto-updates for software not always be the best option?
They always require manual intervention
They can introduce zero-day vulnerabilities
They may conflict with organizational patch policies
They only apply to operating systems, not applications
17
What is a key advantage of SD-WAN over traditional WANs?
It only supports private networks
It provides direct cloud connectivity
It eliminates the need for VPNs
It requires on-premises security appliances
18
What is the primary purpose of IEEE 802.1X?
Preventing man-in-the-middle attacks
Encrypting network traffic
Assigning dynamic IP addresses
Port-based network access control
19
What is the primary security benefit of enforcing least privilege?
Increases software compatibility
Reduces lateral movement by attackers
Prevents phishing attacks
Simplifies user role management
20
How do APIs support secure communication between microservices?
They allow controlled, structured interactions
They remove the need for authentication
They provide a single encrypted tunnel for all services
They replace all security controls with firewalls
21
Which method prevents unauthorized applications from sending outbound traffic?
HIPS
Endpoint Detection and Response
SIEM correlation
Host-based firewall
22
Which method ensures logical separation of network traffic on the same switch
SDN segmentation
Air-gapped switches
VLANs
Static IP routing
23
What is a primary risk when integrating third-party cloud-based services?
Loss of encryption keys
Increased system performance overhead
Potential data leakage or unauthorized access
Inability to scale services effectively
24
Which monitoring method allows real-time traffic blocking?
Access Monitoring
Network tapping
Active monitoring
Passive monitoring
25
An admin configures an ACL allowing 192.168.1.0/24 access to ports 80, 443, and 8088. Which request will be blocked?
192.168.1.200 accessing TCP 80
192.168.2.10 accessing TCP 80
192.168.1.50 accessing TCP 443
192.168.1.100 accessing TCP 8088
26
How does load balancing improve fault tolerance?
It prevents application crashes
It restricts access to high-priority users
It distributes traffic across multiple servers
It encrypts inbound and outbound data
27
Why does SCADA/ICS require extreme segmentation?
To improve authentication mechanisms
To ensure all systems remain online
To prevent unauthorized external access
To allow real-time system updates
28
What is the primary function of a VPN concentrator?
Filtering malicious web content
Encrypting and decrypting VPN connections
Blocking unauthorized user access
Load balancing network traffic
29
What is a primary benefit of a Unified Threat Management (UTM) device?
It replaces the need for endpoint protection
It simplifies security by combining multiple functions
It automatically patches all network devices
It eliminates the need for a firewall
30
Which scenario best represents physical network isolation?
Customer A and B using separate virtual machines
Web and database servers separated by VLANs
A firewall restricting access between subnets
Two networks with no direct connection
31
A company enforces an allow list for applications. Which scenario would likely prevent an employee from running an app?
The app is signed by a trusted vendor
The app runs from an approved directory
The app was installed before the policy was enforced
The app hash does not match an approved entry
32
What is a major security challenge of hybrid cloud environments?
Inconsistent network protection across platforms
Hybrid clouds do not support multi-factor authentication
Limited scalability compared to private clouds
Lack of encryption for hybrid connections
33
Which security measure ensures protection for data in transit across untrusted networks?
Honeypots
IPsec tunnels
Network segmentation
Jump servers
34
Which of the following does Endpoint Detection and Response NOT do?
Behavioral analysis
Sandboxing
File integrity monitoring
Quarantine files
35
Which endpoint security feature can automatically isolate an infected system?
EDR
Host-based firewall
IDS
SIEM correlation engine
36
What is a key difference between fail-open and fail-closed security models?
Fail-open encrypts data, fail-closed decrypts it
Fail-open is used only in passive monitoring
Fail-open blocks all traffic, fail-closed allows all traffic
Fail-open allows traffic to flow during failure, fail-closed blocks it
37
Which deployment method simplifies application rollout by automating provisioning?
Manual configuration
Static routing
Orchestration
Patch management
38
Which security feature is unique to a Next-Generation Firewall (NGFW)?
Deep packet inspection
Stateful packet inspection
NAT functionality
URL filtering
39
What is a primary security benefit of using SASE for remote access?
It places security controls close to cloud services
It centralizes all network traffic through a single firewall
It encrypts only inbound data traffic
It requires manual VPN configuration for each session
40
Why is passive monitoring unsuitable for preventing attacks?
It increases network latency
It requires specialized encryption
It can only monitor encrypted traffic
It only detects threats after they occur
41
Which security technology is considered a next-generation VPN solution for cloud services?
SASE
IPSec
SDN
MPLS
42
An admin scans a server with Nmap and finds multiple unintentionally open ports. What is the best next step?
Close ports and disable remote access
Upgrade the OS to the latest version
Restrict access using a firewall
Run a vulnerability scan against the server
43
What is a major risk of centralized security management?
Lack of real-time log analysis
Increased cost of security appliances
Difficulty correlating security alerts
Higher risk of a single point of failure
44
A network admin needs to segment traffic between departments while minimizing hardware costs. Which solution is best?
Using subnetting without VLANs
Implementing air-gapped physical networks
Deploying multiple firewalls for each department
Configuring VLANs with inter-VLAN routing
45
What is the main purpose of cybersecurity insurance?
Prevents data breaches
Transfers financial risk from cyber incidents
Eliminates downtime from ransomware
Ensures regulatory compliance

Secure Infrastructure Flashcards | StudBud