Networking and VPNs
This set covers how devices and services communicate within a system and across external boundaries. It includes network inventories, routing, firewall and security-group rules, protected remote access, VPN configuration, and review of allowed connections. Questions should identify the relevant network paths and the evidence that demonstrates an enforced restriction or approved connection. Identity decisions belong to SFS 3, application-level protocol behavior to SFS C, and detection and response to SFS 6.