GIAC Exam GSNA Topic 2 Question 69 Discussion

Actual exam question for GIAC's GSNA exam

Question #: 69
Topic #: 2

[All GSNA Questions]

You work as a Network Administrator for Techpearl Inc. You are configuring the rules for the firewall of the company. You need to allow internal users to access secure external websites. Which of the following firewall rules will you use to accomplish the task?

ATCP 172.16.1.0/24 any any 80 HTTP permit

BTCP 172.16.1.0/24 any any 25 SMTP permit

CTCP 172.16.1.0/24 any any 80 HTTP deny

DTCP 172.16.1.0/24 any any 443 HTTPs permit

Show Suggested Answer

Suggested Answer: D

The TCP 172.16.1.0/24 any any 443 HTTPs permit rule is used to allow internal users to access secure external websites.

Answer A is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP permit rule is used to allow internal users to access external

websites (secure & unsecure both).

Answer C is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP deny rule is used to deny internal users to access external websites.

Answer B is incorrect. The TCP 172.16.1.0/24 any any 25 SMTP permit rule is used to allow internal mail servers to deliver mails to

external mail servers.

by Tracey at Apr 07, 2025, 02:53 AM

Limited Time Offer

25%

Off

Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Britt

19 days ago

But allowing access to secure external websites requires using port 443 for HTTPS, so D) makes more sense.

upvoted 0 times

...

Rosenda

1 months ago

Hmm, I think option D is the correct choice here. Allowing access to secure external websites using HTTPS on port 443 seems like the appropriate firewall rule.

upvoted 0 times