Surendra Purohit

The protocol that operates at layer 4 of the OSI model and provides connection-oriented data transmission is TCP. And at layer 4, we have TCP and UDP. TCP is the one that provides connection-oriented data transmission, whereas UDP is connectionless.

We secure the virtualized environment to prevent the VMs scale vulnerabilities by following the CIS benchmarking and applying the VM Hardening. We can ensure the

security of virtualized environment. Explain how will you configure multi factor

To migrate on-prem pipeline to a cloud-based solution without significant downtime, we would take the following step: First, we can check the critical systems. We have to ensure the critical business machines are identified. Based on those business accounts, business machines, we have to segregate, and then we do it while the operations are not active or the machines are not under operations. And then we can do it in batches by segregating it based on business criticality.

Implementing a new network security policy across an organization's layered infrastructure involves a structured process. It's like a new network security policy if we have to implement. First, we need to understand the scope and reason for implementing these policies. Once we have a clear scope and higher management approvals in place, we must identify the critical assets that need to be protected under the layered infrastructure. Based on this, we will design and implement the policy.

Yes. Based on 5 different steps, first thing is planning. I mean, this is basically working on the PDCA plan due to check and act framework in which the first step which we have to do is plan, and then we have to get the approvals from the senior leadership. And then we have to check the current controls, and then we have to implement the gaps that we have discovered. Once this is highlighted, then we can go ahead and do the continuous monitoring. Once I'm sorry, before continuous monitoring, we have to review the current architecture after the implementation of the weaknesses. And afterwards, once this is all complete, then we have to implement continuous monitoring.

If a Linux system is low on memory, the potential first step to managing this issue without adding more RAM is to check the services by using the command 'top', which will list all the services that are running on the system and consuming memory. We can then try to stop those unused services, which will reduce memory consumption.

Do you design default alternate network infrastructure for a financial institution that requires 1991 compliance? Simple. The best way is to comply. And when we're talking about a financial institution, we have to follow the compliance standards, which is like PCI DSS or the NIST framework, which is one of the major stakeholders in point of compliance and governance. So, for the specific financial compliance, we can use the PCI DSS, and that will be the best way to secure or create default tolerant network infrastructure.

The context of AWS, what options do you have for ensuring the high availability of an application serving a global audience? Just like load balancing. 1st, we can do scalability, which is the best option. Then, you see in S3, the storage service, which is already enabled with scalability. Secure, scalable storage, which is self-named, shows that. Also, if you're deploying VMs, we can do clustering. And by following this load balancing and clustering module, we can achieve higher application availability.

Is your experience with HIPAA and SOC compliance? So I have not directly worked on it, but I have an understanding of both. HIPAA is mainly involved when there's health insurance or health-related data to be disclosed or deemed. The full form is the Health Insurance Portability and Accountability Act. And SOC is a compliance involved when there are financial transactions or financial measures to be considered. Then we have to involve this SOC compliance. So, yeah, these ensure that we adhere to the sub-clauses and compliance policies created by considering both the compliance framework. This is how we'll ensure there are certain ways to do internal audits, external audits, and continuous auditing. This is how we can do this infrastructure. We can make sure that the compliance is added to the infrastructure.