Exam CNX-001 topic 1 question 9 discussion

Actual exam question from CompTIA's CNX-001

Question #: 9
Topic #: 1

A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)

A. CDN
B. DLP
C. IDS
D. WAF
E. SIEM
F. NSG

Show Suggested Answer

Suggested Answer: DF 🗳️

by SuntzuLegacy at May 19, 2025, 2:08 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: DF

The two best options for securing the VMs in this scenario are: D. WAF (Web Application Firewall) – A WAF inspects and filters traffic at the application layer (Layer 7) to protect against common web-based attacks (e.g., SQL injection, cross-site scripting). F. NSG (Network Security Group) – An NSG (in cloud environments like Azure) provides network-layer (Layers 3 and 4) access control by allowing or denying traffic to/from your virtual machines or subnets. Other options—such as CDN, DLP, IDS, and SIEM—may be useful in a broader security strategy, but do not directly meet the primary requirement of securing inbound/outbound traffic to the VMs in conjunction with an application load balancer.

upvoted 1 times

...