Module: Segmentation, Backup & Power Activity type: Quiz / retrieval practice Target: ≥80% Objective: Define zones as groups of systems with similar trust and policy requirements.
Learn
Questions
In plain words: Read this block, then try the next action. If you feel stuck, tap What this means.
Why is creating multiple subnets insufficient by itself to establish secure segmentation?
Under first-match processing, what happens when an allow rule is placed after a catch-all default-deny rule?
Which exact rule should match monitoring traffic to TCP 9100 after the policy change?
Why must the lab verify matched rule names in addition to allow or deny decisions?
What is the difference between RFC 1918 space and RFC 5737 space in this architecture?
Why is the monitoring zone separate from the administrator zone?
How can the original policy be recovered if policy.json.bak has already been removed?
Which negative tests demonstrate that the monitoring change did not grant broad administrative access?
In plain words: Big idea: 1.
Learn
After scoring
In plain words: Read this block, then try the next action. If you feel stuck, tap What this means.