CompTIA Network+ (N10-009) N10-009 — Question 606

Which of the following should be implemented to ensure that only permitted external HTTPS endpoints are reachable from a sensitive company department subnet?