Exam CNX-001 topic 1 question 20 discussion

Actual exam question from CompTIA's CNX-001

Question #: 20
Topic #: 1

Security policy states that all inbound traffic to the environment needs to be restricted, but all external outbound traffic is allowed within the hybrid cloud environment. A new application server was recently set up in the cloud. Which of the following would most likely need to be configured so that the server has the appropriate access set up? (Choose two.)

A. Application gateway
B. IPS
C. Port security
D. Firewall
E. Network security group
F. Screened subnet

Show Suggested Answer

Suggested Answer: DE 🗳️

by SuntzuLegacy at May 19, 2025, 2:22 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: DE

The two most likely configurations needed are: D. Firewall – Ensures inbound connections are restricted according to policy and outbound traffic is allowed. E. Network security group – Provides host- or subnet-level controls (e.g., in Azure) so you can define exactly what inbound/outbound rules apply to the new server. Other options (such as an application gateway or IPS) may be part of a broader architecture, but the minimal setup to meet the stated inbound/outbound policy typically involves firewall and security group rules.

upvoted 1 times

...