LeRoy has decided that the servers in one of the VPCs that he manages should only be reachable by IP address and they should not be able to perform any domain name lookups from the Internet. Which of the following ports should he disable on the firewall for that VPC?

Raven has been asked to configure the web server with a specific public class B IP address. Which of the following is a possible address she was given?

Fictional Corp wants to start migrating a bunch of internal applications to a CSP. However, they are in a rural area, and their only connection option is a T1. However, they know that the move would save them money in electrical expenses and reduce the maintenance burden of monitoring and controlling the various firewalls and other related equipment. Which of the following will likely be the biggest hurdle for them?

Kareem has set up a new web server on the company’s private cloud. He has installed the security certificate necessary so that the application can be accessed by HTTPS. He isn’t overly familiar with how these certificates work, so he decides to read up on the details. He learns that there is a pair of keys used to encrypt and decrypt the initial communications. Which of the following is the key that does not get sent to the browser?

Michonne currently manages a private cloud that has been built out in an on-premises data center. Some of the servers are reaching the end of their life, and she has been tasked with finding a solution that minimizes the amount of capital investment necessary. Which of the following might she choose to implement for her company?

Morgan has hardened the virtual machines in the subnet he’s just finished creating by turning off unnecessary services that were running in the background. However, he still wants to prevent unnecessary traffic from getting to the servers in the first place. Which of the following might he choose to implement in his cloud environment?

Lyle’s manager has asked him to implement micro-segmentation for his company’s cloud deployment. He wasn’t very familiar with this term and upon researching, came across the reasoning to implement this as being that nothing should be trusted in a cloud environment and every system, communication, and user is considered a threat until proven otherwise. To which of the following concepts does this relate?

A social video sharing platform has grown quite popular in the United States and has decided to expand to Europe. They want to open a second data center there as part of their expansion. Which of the following is perhaps one of the biggest pieces of the expansion that they want to consider a part of the data storage strategies?

Rose is implementing digital certificates for all of the users in her organization. Which of the following certificate types should she use?

Sean has implemented an automatic account locking policy that will lock a user account after five invalid attempts. Which of the following types of attacks will this help thwart?