CompTIA Security+ (SY0-601) — Question 139

A company has a flat network that is deployed in the cloud. Security policy states that all production and development servers must be segmented. Which of the following should be used to design the network to meet the security requirements?

Answer options

• A. CASB
• B. VPC
• C. Perimeter network
• D. WAF

Correct answer: B

Explanation

The correct answer is B, VPC (Virtual Private Cloud), which allows for the creation of isolated network segments in the cloud, ensuring that production and development environments are separated. The other options, such as CASB, Perimeter network, and WAF, do not provide the required segmentation capabilities within the cloud infrastructure.