Nexnet Academy - get networking-certification ready by fixing real networks

1

Which flow should normally be allowed from the public web tier to the private application tier?

Only the required application portEvery port and protocolDatabase administration from the internetNo traffic including the application

2

Which flow should normally be denied from the public internet to a private database?

Direct database accessThe web user's HTTPS request to the public web tierA monitored backup flow explicitly required by policyA health check explicitly documented

3

Why use separate security groups for web, application and database tiers?

To express narrow, auditable communication boundariesTo remove the need for routesTo make every host publicTo disable monitoring

4

Which statement best describes least privilege?

Grant the minimum access required for the taskGrant access based only on the source subnetAllow all traffic and rely on passwordsUse one policy for every workload

Cloud Security Boundaries