An architect has been tasked with designing a solution for development team deployments that are connected to the corporate network. The network security team would like to ensure that the…

Question

Options

• A
  • On-demand NAT network.
• B
  • On-demand NAT network
• C
  • On-demand routed network
• D
  • On-demand routed network

• A
  7% (2)
• B
  79% (22)
• D
  14% (4)

Explanation

Options B and C satisfy both requirements because on-demand NAT networks create isolated subnets where inbound corporate traffic is blocked by default (only outbound NAT-translated traffic is allowed), and on-demand routed networks provision separate routed segments that are logically isolated from corporate resources while still permitting inter-deployment communication via routing. Both network types prevent unauthorized corporate network access while allowing all deployed VMs to communicate with each other - precisely what the security and architecture requirements demand.

Why A and D are wrong: The question choices appear duplicated due to formatting, but in context, the distractors typically represent either "existing networks" (which directly attach deployments to the corporate network, violating the isolation requirement) or "on-demand private networks" (which achieve isolation but prevent cross-deployment communication, violating the second requirement).

Memory tip: Think of it as a "two-key test" - your answer must satisfy both keys: (1) corporate isolation and (2) intra-deployment reachability. NAT gives you isolation with outbound flexibility; Routed gives you controlled connectivity with segmentation. Private networks fail key #2, and existing networks fail key #1.

No community discussion yet for this question.