Machine-translated by Google. Questions are authored in English.
Top

Discussion

Assertion (A): Placing a database in a private subnet is a meaningful security control.
Reason (R): It removes any route by which the internet can initiate a connection to it.

  • A.A is false but R is true
  • B.Both A and R are true, and R is the correct explanation of A
  • C.Both A and R are true, but R is not the correct explanation of A
  • D.A is true but R is false

Answer: B

Correct answer: Both A and R are true, and R is the correct explanation of A

Both are true and the reason gives the mechanism. A private subnet has no route to an internet gateway, so no connection can be initiated to the database from outside - the entire class of attacks that begins with an exposed port is removed by the routing table rather than by a filter that might be misconfigured. Outbound access for patching still works through a NAT gateway, which passes nothing inward.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.