CompTIA Security+ (SY0-501) — Question 900

A system in the network is used to store proprietary secrets and needs the highest level of security possible. Which of the following should a security administrator implement to ensure the system cannot be reached from the Internet?

Answer options

• A. VLAN
• B. Air gap
• C. NAT
• D. Firewall

Correct answer: B

Explanation

An Air gap provides the highest level of security by physically isolating the system from the Internet, ensuring no external access. VLANs, NAT, and Firewalls may enhance security but do not completely eliminate the risk of Internet connectivity, making them less effective for protecting sensitive information.