CompTIA CNX-001 Exam - Topic 4 Question 26 Discussion

Question

Server A (10.2.3.9) needs to access Server B (10.2.2.7) within the cloud environment since they are segmented into different network sections. All external inbound traffic must be blocked to those servers. Which of the following need to be configured to appropriately secure the cloud network? (Choose two.)

Omega · Accepted Answer

A) Network security group rule:
allow 10.2.3.9 to 10.2.2.7 and C) Network security group rule:
deny 0.0.0.0/0 to 10.2.0.0/16

Omega · Answer

B) Network security group rule:
allow 10.2.0.0/16 to 0.0.0.0/0

Omega · Answer

D) Firewall rule:
deny 10.2.0.0/16 to 0.0.0.0/0

Omega · Answer

E) Firewall rule:
allow 10.2.0.0/16 to 0.0.0.0/0

Omega · Answer

F) Network security group rule:
deny 10.2.0.0/16 to 0.0.0.0/0