Network Segmentation Quiz

What you'll be asked

1. Which component acts as a virtual firewall at the subnet level to control inbound and outbound traffic?
2. You have a three-tier application architecture. Where should you place your database instances to follow the principle of least privilege and network isolation?
3. When configuring a Security Group, why is it considered a best practice to reference another Security Group ID rather than a CIDR block?
4. A web server in a public subnet needs to communicate with a patch management server located on-premises. Which combination of resources is required to maintain security while allowing this traffic?
5. You are auditing a VPC and notice that an instance in a private subnet is unreachable via SSH, even though the Security Group allows port 22 from your management CIDR. What is the most likely cause if the Network ACL is also configured correctly?

Answers and explanations come after you submit.