D329 Networks and Security Applications - Set 4 - Part 3

Correct Answer: Management interfaces are not reachable from the general user network

Isolating management interfaces prevents users or compromised endpoints on the production network from reaching device administration functions.

Correct Answer: Software as a Service (SaaS)

In SaaS the provider manages infrastructure, platform, and application. The customer configures the software and remains responsible for their data and access.

Correct Answer: Security duties are divided between the provider and the customer

Cloud providers secure the underlying infrastructure while customers remain responsible for their data, access management, and configuration, with the split varying by service model.

Correct Answer: Misconfigured access permissions on storage or services

Publicly exposed storage buckets and overly permissive access policies, all customer-side configuration errors, account for a large share of cloud data exposures.

Correct Answer: A contract defining expected service performance and availability

An SLA specifies measurable commitments such as uptime percentage and response times, along with remedies if the provider fails to meet them.

Correct Answer: About 8.76 hours

99.9 percent of a 8,760-hour year leaves roughly 8.76 hours of permitted downtime annually. Each additional nine reduces this by a factor of ten.

Correct Answer: Difficulty migrating away due to proprietary dependencies

Heavy reliance on proprietary services and data formats makes migration costly and complex, reducing negotiating leverage and architectural flexibility.

Correct Answer: It enables faster troubleshooting, recovery, and knowledge transfer

Accurate documentation accelerates diagnosis during outages, supports rebuilding after disaster, and preserves knowledge when staff change roles.

Correct Answer: Troubleshooting and recovery become far harder when problems arise

When configurations diverge from documentation, engineers troubleshoot against inaccurate assumptions and cannot reliably rebuild systems after a failure.

Correct Answer: Conducting realistic tests and exercises of the actual recovery process

Only executing the recovery process reveals gaps in procedures, dependencies, and assumptions. Untested plans routinely fail when genuinely needed.