Where can the Statement of Applicability (SOA) be configured to control the flow of traffic?

Where can the Statement of Applicability (SOA) be configured to control the flow of traffic?

• A. Router interfaces
• B. Switch ports
• C. End-user devices
• D. Firewalls

Answer: (A)

The Statement of Applicability describes which security controls are in place and how they’re enforced. To influence how traffic moves between network segments, those controls must be implemented where the traffic is actually being processed and filtered. Router interfaces are the primary place for this because they enforce inter-network policies—ACLs, route maps, and other filters—that determine which packets are allowed to pass from one network to another. Switch ports govern local, layer-2 access and VLAN boundaries, end-user devices don’t enforce network policy on the path, and while firewalls do filter traffic, the specific enforcement of traffic flow between networks is most directly applied at router interfaces.