CCSP · Question #394
Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?
The correct answer is B. Trust zones. Trust zones (network segmentation using defined security boundaries such as DMZ, internal, and restricted zones) are a logical security concept applicable in both traditional data center environments and cloud environments. In the cloud, trust zones are implemented using…
Question
Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?
Options
- ADedicated switches
- BTrust zones
- CRedundant network circuits
- DDirect connections
How the community answered
(47 responses)- A6% (3)
- B87% (41)
- C2% (1)
- D4% (2)
Explanation
Trust zones (network segmentation using defined security boundaries such as DMZ, internal, and restricted zones) are a logical security concept applicable in both traditional data center environments and cloud environments. In the cloud, trust zones are implemented using virtual network constructs like VPCs, subnets, security groups, and network ACLs. Options A (dedicated switches) and C (redundant network circuits) are physical hardware constructs specific to traditional data centers and are abstracted away in cloud environments. Option D (direct connections) refers to physical dedicated links (e.g., AWS Direct Connect) and is not a universal security measure applied at the network layer in either environment.
Topics
Community Discussion
No community discussion yet for this question.