Where can the Statement of Applicability (SOA) be configured to control the flow of traffic?

• A. Router interfaces
• B. Switch ports
• C. End-user devices
• D. Firewalls

Answer: (A)

The flow of traffic between networks is controlled where traffic is actually forwarded and filtered at the network boundary. Router interfaces are the natural place to implement those controls because they sit at the edge between networks and can enforce policies directly on the traffic that passes from one network to another. By configuring access control lists, route maps, or policy-based routing on those interfaces, you translate the measures documented in the Statement of Applicability into concrete traffic behavior—allowing or denying packets as they cross network boundaries.

Switch ports mainly handle local LAN traffic and VLAN segmentation, so they’re less about controlling inter-network flow. End-user devices are endpoints, not enforcement points for network-wide security policies. Firewalls do enforce traffic filtering too, but the option highlighting router interfaces aligns with the common network architecture where boundary routing points carry the policy to control traffic flow between networks.