問題文
A plant network must send read-only measurements to the corporate analytics platform while accepting nothing inbound at all. A regulator requires that the absence of an inbound path be demonstrable by inspecting the equipment. Which design satisfies that requirement?
選択肢
- The plant should be joined by a stateful firewall dropping unauthenticated sessions at that boundary.
- The plant should be joined by a reverse proxy answering approved requests at that boundary.
- The plant should be joined by a routed segment hiding internal addresses at that boundary.
- The plant should be joined by a unidirectional gateway lacking return paths at that boundary.