CompTIA Security+ (SY0-601) — Question 571

Which of the following is the most effective way to protect an application server running software that is no longer supported from network threats?

Answer options

• A. Air gap
• B. Barricade
• C. Port security
• D. Screened subnet

Correct answer: D

Explanation

A screened subnet effectively isolates the application server from the rest of the network, reducing the risk of network threats. An air gap is impractical for most applications, while barricades and port security do not provide comprehensive protection for unsupported software.