Question
Security policy states that all inbound traffic to the environment needs to be restricted, but all external outbound traffic is allowed within the hybrid cloud environment. A new application server was recently set up in the cloud. Which of the following would most likely need to be configured so that the server has the appropriate access set up? (Choose two.)
- A. Application gateway
- B. IPS
- C. Port security
- D. Firewall Correct
- E. Network security group Correct
- F. Screened subnet
Explanation
Restricting inbound traffic while allowing outbound traffic is done with allow and deny rules: a firewall at the environment edge and a network security group attached to the cloud server's subnet or interface. Both filter by source, destination, port and direction. An application gateway is a layer 7 load balancer, an IPS detects and blocks attacks rather than enforcing the access policy, port security limits MAC addresses on switch ports, and a screened subnet is a network zone rather than a rule set.
