CNX-001 · Question #38
A company hosts its application s on the cloud and is expanding its business to Europe. The company must comply with General Data Protection Regulation to limit European customers' access to data…
The correct answer is D. Geofencing rule. Geofencing rules allow an organization to restrict access to data or services based on the geographic location of the requesting IP address. To comply with GDPR - which limits how European customer data can be accessed - the network team should configure geofencing rules that…
Question
A company hosts its application s on the cloud and is expanding its business to Europe. The company must comply with General Data Protection Regulation to limit European customers' access to data. The network team configures the firewall rules but finds that some customers in the United States can access data hosted in Europe. Which of the following is the best option for the network team to configure?
Options
- ASASE
- BNetwork security groups
- CCDN
- DGeofencing rule
How the community answered
(25 responses)- A16% (4)
- B8% (2)
- C4% (1)
- D72% (18)
Explanation
Geofencing rules allow an organization to restrict access to data or services based on the geographic location of the requesting IP address. To comply with GDPR - which limits how European customer data can be accessed - the network team should configure geofencing rules that block or restrict access to European-hosted data from outside approved regions. Since US users are still accessing European data, the firewall rules alone are insufficient and a geographic boundary enforcement mechanism is needed. SASE (A) is a broader architectural framework, not a specific rule type. Network security groups (B) control traffic within cloud environments by IP/port but do not natively enforce geographic restrictions. A CDN (C) improves content delivery performance and can have some geo-restrictions, but is not primarily a compliance enforcement tool.
Topics
Community Discussion
No community discussion yet for this question.