Cloud Network Architecture: Master the Fundamentals for Cybersecurity

Question 1

Which topology connects all virtual machines (VMs) to a single central switch?

Accepted Answer

Star

Answer

Fully Meshed

Answer

Bus

Answer

Single-tiered

Question 2

Which service provides load balancing to distribute traffic across multiple servers?

Accepted Answer

AWS Load Balancer

Answer

IAM

Answer

Kubernetes

Answer

Cloud DNS

Question 3

What is the primary purpose of a Virtual Private Cloud (VPC)?

Accepted Answer

To secure access to resources within a cloud environment

Answer

To enhance network performance

Answer

To connect different cloud services

Answer

To manage network policies

Question 4

What is the purpose of a network security group (NSG) in a cloud environment?

Accepted Answer

To define firewall rules for network traffic

Answer

To allow access control to resources

Answer

To monitor and block malicious network activity

Answer

To encrypt network traffic

Question 5

What is the primary purpose of a Virtual Private Cloud (VPC)?

Accepted Answer

To isolate cloud resources within a specific boundary

Answer

To provide a private connection between on-premises and cloud environments

Answer

To define network policies and rules

Answer

To provide access to public cloud services

Question 6

In cloud environments, what is a key advantage of network segmentation?

Accepted Answer

Enhanced security

Answer

Improved performance

Answer

Increased scalability

Answer

Simplified management

Question 7

In cloud network architecture, what is the purpose of a Demilitarized Zone (DMZ)?

Accepted Answer

To isolate public-facing services from internal resources

Answer

To provide a perimeter defense system against external attacks

Answer

To provide a dedicated network for cloud management tasks

Answer

To connect multiple cloud providers

Question 8

What is the primary function of a Security Information and Event Management (SIEM) system in cloud security?

Accepted Answer

To collect and analyze security events

Answer

To provide real-time threat detection and response

Answer

To enforce network security policies

Answer

To encrypt cloud data

Question 9

In cloud network security, what is the significance of encryption?

Accepted Answer

To protect data in transit and at rest

Answer

To prevent data breaches

Answer

To ensure authentication and authorization

Answer

To enhance network performance

Question 10

Which fundamental component of a cloud network architecture enables the creation of isolated network segments?

Accepted Answer

Virtual LANs

Answer

Virtual Firewalls

Answer

Physical Routers

Answer

Intrusion Detection Systems

Question 11

What is the primary purpose of a virtual private cloud (VPC) within a cloud environment?

Accepted Answer

To provide a dedicated and isolated network segment for customer resources

Answer

To manage network traffic across multiple cloud regions

Answer

To connect on-premises networks to cloud resources

Answer

To encrypt data in transit

Question 12

Distinguish between a transit gateway and a virtual private gateway's functionality in a cloud environment.

Accepted Answer

A transit gateway interconnects networks across VPCs, while a virtual private gateway connects a VPC to an on-premises network.

Answer

A transit gateway manages network traffic between cloud regions, while a virtual private gateway connects to on-premises networks.

Answer

A transit gateway provides routing for VPCs, while a virtual private gateway encrypts data in transit.

Answer

A transit gateway is a private network, while a virtual private gateway is a public network.

Question 13

What is the primary purpose of using a network access control list (ACL) in a cloud environment?

Accepted Answer

To define and control the flow of traffic entering and leaving a network

Answer

To monitor network traffic for security-related events

Answer

To encrypt data in transit

Answer

To implement network segmentation

Question 14

What is the role of a security group within a cloud network architecture?

Accepted Answer

To define a set of security rules applicable to a group of resources

Answer

To monitor network traffic for suspicious activity

Answer

To encrypt data in transit

Answer

To implement network load balancing

Question 15

Which VPN tunneling protocols are commonly used to create secure connections between remote clients and private networks?

Accepted Answer

IPsec and SSL

Answer

TCP and UDP

Answer

HTTP and HTTPS

Answer

FTP and SMTP

Question 16

Which component is responsible for directing and controlling the flow of data packets within a cloud network?

Accepted Answer

Virtual router

Answer

Network switch

Answer

Firewall

Answer

Load balancer

Question 17

Which type of cloud network connection allows for secure data transfer between an on-premises network and a cloud environment?

Accepted Answer

Site-to-site virtual private network (VPN)

Answer

Direct internet connection

Answer

Satellite link

Answer

Extranet

Question 18

What is the primary function of a load balancer in a cloud network?

Accepted Answer

Distribute incoming network traffic across multiple servers to manage load and improve performance

Answer

Encrypt data transmissions

Answer

Filter malicious traffic

Answer

Monitor network performance

Question 19

Which protocol is commonly used to establish secure communication channels over the internet in cloud environments?

Accepted Answer

Secure Socket Layer (SSL) / Transport Layer Security (TLS)

Answer

Transmission Control Protocol (TCP)

Answer

Internet Control Message Protocol (ICMP)

Answer

Hypertext Transfer Protocol (HTTP)

Question 20

What is a key benefit of implementing network segmentation in cloud environments?

Accepted Answer

Limits the potential impact and spread of security breaches by isolating different parts of the network

Answer

Simplifies network management

Answer

Reduces network costs

Answer

Improves overall network performance

Question 21

Which component is primarily used to monitor and analyze network traffic for potential security threats in cloud environments?

Accepted Answer

Network intrusion detection system (NIDS)

Answer

Firewall

Answer

Load balancer

Answer

Virtual router

Question 22

What is the primary objective of implementing microsegmentation in cloud environments?

Accepted Answer

To further isolate workloads within a network, reducing the potential attack surface and enhancing security

Answer

To improve network performance and reduce latency

Answer

To increase network visibility and improve monitoring

Answer

To simplify network management and reduce operational costs

Question 23

Which of the following is considered a best practice for securing cloud network communications?

Accepted Answer

Utilizing strong encryption algorithms to protect data in transit

Answer

Disabling network logging to reduce security risks

Answer

Allowing unrestricted access to all ports on all servers

Answer

Avoiding the use of network segmentation

Question 24

What is the main purpose of network access control (NAC) in cloud security?

Accepted Answer

To enforce network access policies and restrict unauthorized access to network resources

Answer

To monitor network traffic and detect malicious activity

Answer

To provide unfettered network access to all users and devices

Answer

To scan for viruses and malware on network devices