CompTIA CySA+ (CS0-002) — Question 112

A development team signed a contract that requires access to an on-premises physical server Access must be restricted to authorized users only and cannot be connected to the internet Which of the following solutions would meet this requirement?

Answer options

• A. Establish a hosted SSO
• B. Implement a CASB
• C. Virtualize the server
• D. Air gap the server

Correct answer: D

Explanation

The correct answer is D, as air gapping a server ensures that it is physically isolated from any network connection, including the internet, thus preventing unauthorized access. Options A and B do not provide the necessary physical isolation, while C, virtualization, could still allow for network connectivity, which violates the contract requirement.