Make the segmentation rule that was already written actually run
Try this labAll SY0-701 practice
- Certification
- SY0-701
- Format
- Rule table
- Difficulty
- medium
- Estimated time
- 15 min
- Automated checks
- 7
SCENARIO
A payment processor's migration left broad access to cardholder-data segment 10.40.5.0/24. A workstation-blocking rule has not resolved the finding. Only payment servers 10.20.1.0/24 and hardened jump host 10.30.9.10/32 have approved access; the existing business flows must continue.
TASK
Repair the inbound firewall rule table so the payment servers reach the card vault only on TCP 5432 and the jump host only on TCP 22. Deny every other inbound flow and preserve the platform's locked default rule.