Which of the following is a recommended practice for network separation in a cloud environment?

Question

Options

• AUse a single network for all types of traffic to simplify management
• BSeparate administrative, user, and database traffic
• CCombine database and administrative traffic to reduce costs
• DUse physical separation only, avoiding virtual network segmentation

• A
  3% (1)
• B
  94% (34)
• C
  3% (1)

Explanation

Separating administrative, user, and database traffic (B) is a core security principle because it limits the blast radius of a breach - if one network segment is compromised, attackers can't freely pivot to others. A is wrong because combining all traffic on one network eliminates isolation, making it trivial for an attacker with any foothold to reach sensitive systems like databases. C is wrong because merging database and administrative traffic is especially dangerous - it exposes your most sensitive data store to the same attack surface as privileged management interfaces. D is wrong because cloud environments rely on virtual network segmentation (VPCs, subnets, security groups, VLANs), which is both practical and effective - physical-only separation isn't feasible or necessary in cloud infrastructure.

Memory tip: Think "A-U-D-IT" - Admin, User, Database - keep them apart, or you'll need an audit after the breach.

No community discussion yet for this question.