Certificate of Cloud Security Knowledge (CCSK) — Question 121
What is true of cloud built-in firewalls?
Answer options
- A. They operate exclusively outside of the hypervisor
- B. Whichever features are not provided in the firewall, the cloud provider has an alternative
- C. They operate exclusively outside of the SDN
- D. They typically offer fewer features that newer physical firewalls
- E. They provide identical configurations to physical firewalls
Correct answer: D
Explanation
The correct answer is D because cloud built-in firewalls often have less functionality compared to the latest physical firewalls. Options A, C, and E are incorrect as they misrepresent the operational context of cloud firewalls, and option B is misleading because it suggests a seamless alternative that may not always exist.