How can you reduce the blast radius if an attacker compromises one system?

The correct answer is B. Configure applications on distinct virtual networks only connecting where needed. A common, practical example leveraging this capability is running most, if not all, applications on their own virtual network and only connecting those networks as needed. This dramatically reduces the blast radius if an attacker compromises an individual system. The attacker…

Cloud Architecture and Design

Question

Options

AConfigure distinct firewall rules
BConfigure applications on distinct virtual networks only connecting where needed
CConfigure role-based access controls
DConfigure a default deny
EUse different cloud providers

How the community answered

(14 responses)

B
79% (11)
D
14% (2)
E
7% (1)

Explanation

A common, practical example leveraging this capability is running most, if not all, applications on their own virtual network and only connecting those networks as needed. This dramatically reduces the blast radius if an attacker compromises an individual system. The attacker can no longer leverage this foothold to expand across the entire data center.

Topics

#blast radius#network segmentation#virtual networks#micro-segmentation

Community Discussion

No community discussion yet for this question.

Full CCSK Practice