Make the segmentation rule that was already written actually run
A hands-on SY0-701 lab. You produce the real artefact and 7 automated checks verify it behaves the way the exam expects.
Try this labAll SY0-701 practice
- Certification
- SY0-701
- Format
- Rule table
- Difficulty
- medium
- Estimated time
- 15 min
- Automated checks
- 7
The brief
Rewrite the inbound rule table for the cardholder-data segment so it permits only what the change record approved: the payment application servers to the card vault on TCP 5432, and the jump host to the card vault on TCP 22. Rules are evaluated from the lowest priority number upwards and the first rule that matches decides the packet, so read the table in that order before changing it - one of the rules already there never runs. Everything the table does not permit falls through to the platform's locked deny rule, which you cannot edit. Keep both approved flows working.
Part of SY0-701 preparation
Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.