Exam C1000-100 topic 1 question 25 discussion

Actual exam question from IBM's C1000-100

Question #: 25
Topic #: 1

A VPC has been created with a single subnet. Virtual server instances have been deployed on the subnet that have different functions which support a production application. The security team has now said that they want to ensure that network traffic between the different server types can be controlled. How can this be achieved?

A. Use a Hardware Security Module to create advanced network routing tables that ensure traffic does not route between server types, as per the security team's wishes
B. Create security groups for the different server types with inbound and outbound rules that satisfy the security team, into which the VSIs can be placed
C. Create a VPC load balancer and place each server type into its own back-end pool, then create Layer-7 routing policies that restrict network traffic flowing between the different pools
D. Create multiple access control lists with rules that satisfy the security team's requirements and associate each VSI to the respective ACL

Show Suggested Answer

Suggested Answer: A 🗳️

by 2g at March 16, 2021, 8:48 p.m.