CompTIA DataX (CNX-001) — Question 16

Security policy states that all inbound traffic to the environment needs to be restricted, but all external outbound traffic is allowed within the hybrid cloud environment. A new application server was recently set up in the cloud. Which of the following would most likely need to be configured so that the server has the appropriate access set up? (Choose two.)

Answer options

• A. Application gateway
• B. IPS
• C. Port security
• D. Firewall
• E. Network security group
• F. Screened subnet

Correct answer: D, E

Explanation

The correct answers, D (Firewall) and E (Network security group), are essential for managing the traffic rules and access controls for the application server. A firewall helps to filter inbound and outbound traffic based on the established security policy, while a network security group provides fine-tuned control over network access. The other options do not specifically address the need for restricting inbound traffic and allowing outbound traffic as required by the policy.