Exam CAS-004 topic 1 question 597 discussion

Actual exam question from CompTIA's CAS-004

Question #: 597
Topic #: 1

A new VM server (Web Server C) was spun up in the cloud and added to the load balancer to support an existing web application (Application A) that does not require internet access. Sales users are reporting intermittent issues with this application when processing orders that require access to the warehouse department. Given the following information:

Device information:
Web Server A: 10.2.0.60 Sales: 10.3.0.65/26
Web Server B: 10.2.0.61 Warehouse: 10.4.0.0/24
Web Server C: 10.2.0.92 Application A Subnet: 10.2.0.0/26

Firewall rules -

Application A security group inbound rules

Application A security group outbound rules

The security team wants to minimize the firewall rule set by avoiding specific host rules whenever possible. Which of the following actions must be taken to resolve the issue and meet the security team’s requirement?

A. Reconfigure Web Server C to 10.2.0.62.
B. Modify the firewall rules to include the new IP address of Web Server C.
C. Alter the security group outbound rules to be more restrictive.
D. Change the security group inbound rules to include the new IP address of Web Server C.

Show Suggested Answer

Suggested Answer: B 🗳️

by Steel16 at March 11, 2025, 12:39 p.m.

Comments

Submit Cancel

Steel16

3 months, 3 weeks ago

Selected Answer: B

o Inclusion of New IP Address: By modifying the firewall rules to include the IP address of Web Server C (10.2.0.92), you ensure that the new server can communicate properly with the necessary components, such as the warehouse department. o Minimizing Specific Host Rules: This approach allows you to update the existing rules to accommodate the new server without creating specific host rules, thus keeping the rule set minimal and manageable.

upvoted 2 times

...