A company is testing a new software product that is intended for auto discovery of assets within a cloud environment. The testing department wants to ensure that initial testing does not allow the…

ACLs are rule-based packet filters applied at network interfaces or routers that permit or deny traffic based on source and destination IP addresses, ports, and protocols. By configuring ACLs to block outbound connections from the test environment's subnet, the administrator ensures the auto-discovery software cannot communicate beyond the test network. This is the appropriate enforcement mechanism for strict network containment around a test environment.

A DMZ is a network zone designed to host publicly accessible services, which exposes services outward rather than containing traffic within a boundary.

An IDS (Intrusion Detection System) passively monitors and alerts on suspicious traffic but does not block or prevent traffic from leaving the test environment.

SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices and has no capability to enforce traffic containment or access restrictions.