MENU
You work as a Network Administrator for Techpearl Inc. You are configuring the rules for the firewall of the company. You need to allow internal users to access secure external websites. Which of the following firewall rules will you use to accomplish the task?
Suggested Answer: D
Get Premium GSNA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The TCP 172.16.1.0/24 any any 443 HTTPs permit rule is used to allow internal users to access secure external websites.
Answer A is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP permit rule is used to allow internal users to access external
websites (secure & unsecure both).
Answer C is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP deny rule is used to deny internal users to access external websites.
Answer B is incorrect. The TCP 172.16.1.0/24 any any 25 SMTP permit rule is used to allow internal mail servers to deliver mails to
external mail servers.
30 comments · newest first
CE
Celia
10 months ago
Not sure about that, isn't 80 just for HTTP?
RE
Renea
10 months ago
Definitely Rule D for HTTPS access!
MA
Marjory
10 months ago
Wait, why is SMTP even an option here?
AN
Annamae
10 months ago
Rule D is the one you need for secure sites!
RA
Raul
10 months ago
I think Rule A is better for general web access.
KA
Kassandra
11 months ago
I’m a bit confused about the SMTP option. I know it’s for email, but it doesn’t seem relevant here. I guess we should focus on HTTP and HTTPS.
FA
Fairy
11 months ago
I think we practiced a similar question where we had to differentiate between HTTP and HTTPS. If I recall correctly, option D makes the most sense for secure access.
WA
Walton
11 months ago
I'm not entirely sure, but I feel like allowing port 80 would only cover non-secure sites. Shouldn't we be looking at port 443 for secure access?
BE
Bettye
11 months ago
I remember we discussed that HTTP is for regular web traffic, but secure sites use HTTPS, right? So, I think option D might be the one we need.
JO
Josefa
11 months ago
I'm a bit confused by the different options. I'll need to carefully review the details of each firewall rule to determine the best one for this scenario.
AL
Alpha
12 months ago
I'm feeling confident about this one. The question is clear, and option D seems to be the right choice to allow secure external website access for the internal users.
CA
Casey
12 months ago
Okay, I've got this. The question is asking to allow internal users to access secure external websites, so I'll go with option D to permit TCP traffic on port 443 for HTTPS.
OR
Orville
12 months ago
Hmm, I'm a bit unsure about this one. I need to double-check the different firewall rule options and make sure I understand the requirements correctly.
JU
Juliann
1 year ago
This looks like a straightforward firewall configuration question. I think the key is to identify the correct protocol and port for accessing secure external websites.
JA
Janine
1 year ago
Option C is just denying all HTTP traffic, which isn't what we want. Gotta go with D to permit the HTTPS connections.
CA
Carol
1 year ago
Haha, option B for SMTP? That's a funny one. I don't think we're trying to send emails through the firewall here.
EL
Elli
1 year ago
C) TCP 172.16.1.0/24 any any 80 HTTP deny
SH
Shanda
1 year ago
B) TCP 172.16.1.0/24 any any 25 SMTP permit
CH
Charlette
1 year ago
A) TCP 172.16.1.0/24 any any 80 HTTP permit
TE
Telma
1 year ago
Option A looks good too, but it's specifically for HTTP on port 80, not HTTPS. I'd go with D to be on the safe side.
AN
Annabelle
1 year ago
Yes, it's important to prioritize security when configuring firewall rules for accessing external websites.
SE
Sena
1 year ago
Option A looks good too, but it's specifically for HTTP on port 80, not HTTPS. I'd go with D to be on the safe side.
EL
Elvis
1 year ago
I agree, option D specifies HTTPS on port 443 which is more secure than HTTP on port 80.
EU
Eulah
1 year ago
I think option D is the best choice for allowing access to secure external websites.
BR
Britt
1 year ago
But allowing access to secure external websites requires using port 443 for HTTPS, so D) makes more sense.
RO
Rosenda
1 year ago
Hmm, I think option D is the correct choice here. Allowing access to secure external websites using HTTPS on port 443 seems like the appropriate firewall rule.
LI
Lina
1 year ago
User 2: Yeah, HTTPS on port 443 is the way to go for secure connections.
CH
Charolette
1 year ago
User 1: I agree, option D is the best choice for allowing access to secure external websites.
DO
Donette
1 year ago
I disagree, I believe the correct answer is A) TCP 172.16.1.0/24 any any 80 HTTP permit.
BR
Britt
2 years ago
I think the answer is D) TCP 172.16.1.0/24 any any 443 HTTPs permit.