Discussion
Assertion (A): Placing a database in a private subnet is a meaningful security control.
Reason (R): It removes any route by which the internet can initiate a connection to it.
Answer: B
Correct answer: Both A and R are true, and R is the correct explanation of A
Both are true and the reason gives the mechanism. A private subnet has no route to an internet gateway, so no connection can be initiated to the database from outside - the entire class of attacks that begins with an exposed port is removed by the routing table rather than by a filter that might be misconfigured. Outbound access for patching still works through a NAT gateway, which passes nothing inward.
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development