nerdexam
CSA

CCSK · Question #215

How does running applications on distinct virtual networks and only connecting networks as needed help?

The correct answer is D. It reduces the blast radius of a compromised system. A common, practical example leveraging this capability is running most, if not all, applications on their own virtual network and only connecting those networks as needed. This dramatically reduces the blast radius if an attacker compromises an individual system. The attacker…

Cloud Platform and Infrastructure Security

Question

How does running applications on distinct virtual networks and only connecting networks as needed help?

Options

  • AIt reduces hardware costs
  • BIt provides dynamic and granular policies with less management overhead
  • CIt locks down access and provides stronger data security
  • DIt reduces the blast radius of a compromised system
  • EIt enables you to configure applications around business groups

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    11% (6)
  • C
    2% (1)
  • D
    77% (41)
  • E
    4% (2)

Explanation

A common, practical example leveraging this capability is running most, if not all, applications on their own virtual network and only connecting those networks as needed. This dramatically reduces the blast radius if an attacker compromises an individual system. The attacker can no longer leverage this foothold to expand across the entire data center.

Topics

#network isolation#blast radius#virtual networks#network segmentation

Community Discussion

No community discussion yet for this question.

Full CCSK Practice