Network Segmentation Strategies Quiz

What you'll be asked

1. Which of the following components is primarily used to control inbound and outbound traffic at the subnet level within a VPC?
2. When designing a multi-tier application architecture in a VPC, which of the following is considered a security best practice?
3. You need to allow instances in a private subnet to download security patches from the internet without exposing the instances to inbound public traffic. Which component should you deploy?
4. A web server in a public subnet needs to communicate with an application server in a private subnet. How should you configure the security groups for the application server?
5. You are implementing a 'Zero Trust' network design. You have a requirement to inspect traffic between two microservices located in different subnets within the same VPC. Which solution provides the most granular traffic inspection and filtering?

Answers and explanations come after you submit.