CertMaster Practice: 3.0 Security Architecture

Question 1

A cloud administrator wants to directly connect a cloud server instance with another cloud server instance privately on Amazon Web Services (AWS). How can the administrator configure them without going through an internet gateway?

Answer 1

By using a virtual private cloud (VPC) peering connection

Question 2

Define a ‘virtual private cloud (VPC) peering connection’

Answer 2

Allowing routing traffic between two VPCs using private IPv4 addresses or IPv6 addresses.

Question 3

When implementing an IDS/IPS, where is the best place to deploy the device?

Answer 3

In inline mode at the network perimeter allows for real-time analysis and reaction to potential threats, providing comprehensive protection for all inbound and outbound network traffic.

Question 4

Where should an IDS sensor be delpoyed?

Answer 4

At network choke points ensures that they can monitor both inbound and outbound traffic.

Question 5

What is the ideal method to protect data in use?

Answer 5

Implementing permission restrictions.