問題文
A bank's internal tool runs in a Private Space and must be reachable only from the corporate network and from a content delivery service that proxies traffic. The team wants this enforced before requests reach the application. Which feature is intended for this?
選択肢
- A peering connection, which makes the app private and filters inbound requests so that only the corporate network and the proxy can reach it.
- Internal routing on each app, which limits the app to traffic from other apps in the space and from peered or VPN-connected networks, and therefore also covers requests that arrive from a content delivery service on the public internet.
- DNS service discovery, which resolves the app to a private address and also decides which client networks are allowed to reach the app before a request is accepted.
- Trusted IP ranges for the space, which restrict which client address ranges are allowed to reach the apps in the space.