Cloud Network Security and Segmentation Questions

Design and hardening of cloud network architectures including virtual private cloud design, subnets, security groups, network access control lists, private connectivity options, virtual private network and direct interconnect patterns, and transit and peering architecture. Cover cloud native isolation and microsegmentation patterns, distributed denial of service protection, web application firewall placement, load balancing and public exposure, data exfiltration controls, and monitoring and logging in cloud networks. Address differences between cloud vendor primitives and on prem networking and hybrid connectivity considerations.