Segmentation And Isolation

Question 1

Enclave

Answer 1

Security zone type, this is a restricted network within a trusted network

Question 2

Micro-segmentation

Answer 2

Method of creating zones within data Centres and cloud environments to isolate workloads from one to another and secure them individually

Question 3

Security zone

Answer 3

This is a decision of network based functional performance and/or security requirements. Security zones are enforced by firewall incoming (ingress) and outcoming (egress) access control list (ACL) rules

Question 4

protect surface

Answer 4

Micro-segmentation type, is made up of the networks - most critical and vulnerable data, assets, applications, services. It is always knowable

Question 5

Untrusted

Answer 5

Security zone type, an untrusted network is one which the organization has no control over

Question 6

Segmentation

Answer 6

Used for creating and enforcing security principles and policies, controlling information flow and securing network access

Question 7

Air gapped

Answer 7

Security zone type. This network does not have connection to any untrusted network

Question 8

Physically isolated network

Answer 8

Security network zone type, this network does not have connection to any other network

Question 9

East-west micro-segmentation

Answer 9

Refers to a traffic within a data center and cloud

Question 10

Logical isolation

Answer 10

VLAN - virtual local area network, divides a single existing network into multiple logical network segments which can be restricted. Broadcast domains are portioned and isolated at the data link layer

Question 11

Trusted network

Answer 11

Security zone type, is one which the organization has complete control over

Question 12

Virtualization in isolation

Answer 12

Creates multiple environments from a physical hardware system, provide fault and secure isolation at the hardware level including memory or CPU access

Question 13

North-south

Answer 13

Micro-segmentation type, refers to the traffic that flows into data centers or cloud

Question 14

Isolation

Answer 14

Is when zones, devices , sessions need to be segregated , so as not to cause harm or to be harmed

Question 15

Zero-Trust

Answer 15

Micro segmentation - allows for the implementation of zero trust protect surface environments. Authentication is always required and enforces least privilege access

Question 16

VPN virtual private network

Answer 16

Security zone type, this network is designed to facilitate secure communications over public circuit

Question 17

Screened subnet

Answer 17

This is security zone type, has connections to both trusted and untrusted networks