Bastion Host Setup & Security Design Quiz

Submit

3. Which compliance framework typically requires bastion host implementation and monitoring?

SOC 2, HIPAA, and PCI-DSS

No frameworks require it

Only internal company policies

Social media guidelines

4. True or False: Bastion hosts should run unnecessary background services to maximize functionality.

True

False

5. What security control prevents unauthorized lateral movement from a bastion host?

Network segmentation and microsegmentation

Disabling all firewalls

Allowing unrestricted internal access

Using the same credentials everywhere

Submit

7. Which firewall rule configuration is essential for bastion host protection?

Whitelist only required source IPs and ports

Allow all inbound traffic

Block all traffic indiscriminately

Allow traffic based on user requests

8. True or False: A bastion host should allow direct database connections from external networks.

True

False

9. What is the recommended approach for bastion host password management?

Use a secrets management system with automated rotation

Store passwords in plaintext files

Share passwords via email

Use the same password for all accounts

10. Which vulnerability scanning approach is most appropriate for bastion hosts?

Regular automated scans with manual remediation

No scanning to avoid disruption

Scanning only during maintenance windows

Scanning external systems only

11. What is the primary function of a bastion host in network architecture?

To serve as a single point of entry for administrative access to internal systems

To replace all firewall rules in the network

To cache user credentials for faster login

To monitor all user email traffic

12. What is the purpose of implementing jump proxy functionality on a bastion host?

To control and mediate connections to backend systems

To increase network latency intentionally

To replace database backups

To cache sensitive data locally

13. Which of the following is a recommended bastion host network segmentation strategy?

Isolate bastion host on separate network with restricted firewall rules

Connect bastion host to all internal subnets

Place bastion host on public internet without filtering

Share bastion host resources with web servers

14. What should be implemented to monitor and log all bastion host activities?

Centralized Security Information and Event Management (SIEM)

Local log files only, never centralized

Disable all logging for performance

Manual log review once per year

15. Which access control model is most appropriate for bastion host user permissions?

Principle of least privilege with role-based access control

Unrestricted administrative access

Allow all users full system access

Grant permissions based on user seniority

16. What is session recording on a bastion host primarily used for?

Audit trails and compliance documentation of administrative actions

Entertainment and training purposes only

Reducing network bandwidth

Improving system performance

17. Which protocol should be used instead of Telnet for bastion host remote access?

SSH (Secure Shell)

HTTP

FTP

Telnet with encryption

18. What authentication method provides the strongest security for bastion host access?

Multi-factor authentication with public key cryptography

Single password authentication

Shared group passwords

No authentication required

19. A bastion host should be placed in which network segment?

Demilitarized Zone (DMZ)

Internal corporate network

Guest WiFi network

Storage area network (SAN)

20. Which hardening technique is most critical when securing a bastion host?

Disabling unnecessary services and removing unused software

Enabling all ports for maximum flexibility

Installing the latest entertainment applications

Running multiple web servers simultaneously

Infrastructure Expert Designing a Bastion Host Setup Quiz

1. A bastion host should have ____ network interfaces to maintain strict access separation.

2.

What first name or nickname would you like us to use?

2. A bastion host ____ policy determines which systems administrators can access.