CV0-002 · Question #252
A company is testing a new software product that is intended for auto discovery of assets within a cloud environment. The testing department wants to ensure that initial testing does not allow the pro
The correct answer is A. ACLs. To prevent a new auto-discovery product from extending beyond the test environment, the network administrator should implement ACLs.
Question
A company is testing a new software product that is intended for auto discovery of assets within a cloud environment. The testing department wants to ensure that initial testing does not allow the product to leave the boundary of the test environment. Which of the following should the network administrator implement in the department test environment?
Options
- AACLs
- BDMZ
- CIDS
- DSNMP
How the community answered
(15 responses)- A80% (12)
- C13% (2)
- D7% (1)
Why each option
To prevent a new auto-discovery product from extending beyond the test environment, the network administrator should implement ACLs.
Access Control Lists (ACLs) are a network security feature that allows the administrator to define rules on network devices (like firewalls or routers) to explicitly permit or deny specific traffic based on source, destination, protocol, or port, thereby precisely controlling and restricting outbound connections from the test environment.
A DMZ (Demilitarized Zone) is a perimeter network designed to expose services to an untrusted external network while protecting the internal network, rather than containing traffic within a test environment's boundary.
An IDS (Intrusion Detection System) monitors network traffic for suspicious activities and generates alerts but does not actively block or prevent connections from leaving a defined network boundary.
SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices and collecting their operational data, not for controlling or restricting the flow of network traffic itself.
Concept tested: Network security controls for environment isolation
Source: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
Topics
Community Discussion
No community discussion yet for this question.