CV0-004 · Question #206
A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for the public web…
The correct answer is B. Remove rules 1, 3, and 4. To ensure web servers in a public subnet allow only secure communications, the analyst must remove rules that permit insecure protocols like HTTP, Telnet, or other non-encrypted services.
Question
A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for the public web servers is as follows:
Which of the following actions should the analyst take to accomplish the objective?
Exhibit
Options
- ARemove rules 1, 2, and 5.
- BRemove rules 1, 3, and 4.
- CRemove rules 2, 3, and 4.
- DRemove rules 3, 4, and 5.
How the community answered
(55 responses)- A4% (2)
- B85% (47)
- C2% (1)
- D9% (5)
Why each option
To ensure web servers in a public subnet allow only secure communications, the analyst must remove rules that permit insecure protocols like HTTP, Telnet, or other non-encrypted services.
This choice might remove necessary secure access rules or leave insecure ones in place, depending on what rules 2 and 5 represent.
To achieve 'only secure communications,' rules permitting insecure protocols such as HTTP (port 80), Telnet (port 23), or other unencrypted services must be removed. By removing rules 1, 3, and 4, which are inferred to allow these insecure forms of access, the configuration would force clients to use secure alternatives like HTTPS (port 443) for web access and SSH (port 22) for management.
This choice might remove necessary secure access rules or leave insecure ones in place, depending on what rules 2, 3, and 4 represent.
This choice might remove necessary secure access rules or leave insecure ones in place, depending on what rules 3, 4, and 5 represent.
Concept tested: Network security group configuration for web servers
Source: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
Topics
Community Discussion
No community discussion yet for this question.