MENU
Which of the following firewall rules found on a firewall installed between an organization's internal network and the Internet would present the greatest danger to the internal network?
Suggested Answer: C
Get Premium SSCP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Any opening of an internal network to the Internet is susceptible of creating a new vulnerability.
Of the given rules, the one that permits all inbound tcp connections is the less likely to be used since it amounts to almost having no firewall at all, tcp being widely used on the Internet.
Reference(s) used for this question:
ALLEN,
Julia H., The CERT Guide to System and Network Security Practices, Addison-Wesley, 2001, Appendix B, Practice-Level Policy Considerations (page 409).
12 comments · newest first
ET
Ettie
11 months ago
Really? I didn't think tcp connections could be that dangerous!
DO
Dorsey
12 months ago
Wait, isn't D also a huge risk? Logging can be exploited.
JE
Jestine
12 months ago
Permit all traffic? That's just asking for trouble!
AL
Alesia
12 months ago
I think B is pretty risky too, though.
AU
Augustine
1 year ago
C is definitely the worst option here.
ED
Edwin
1 year ago
I feel like allowing all inbound TCP connections is definitely the worst choice, but I wonder if the syslog rule could also be a concern if not properly secured.
AN
Annabelle
1 year ago
If I remember correctly, permitting all traffic between local hosts is generally safe, but it could still lead to issues if there's a compromised device.
TR
Truman
1 year ago
I think I saw a practice question about SSH traffic being risky, but I can't recall if it's worse than allowing all TCP connections.
ED
Eden
1 year ago
I remember discussing how allowing all inbound TCP connections could expose the network to various attacks, but I'm not entirely sure if that's the most dangerous option here.
CA
Carey
1 year ago
Ah, this is a tricky one. I'm not totally confident, but I'm leaning towards B. Misconfigured SSL/TLS can definitely leave data in motion vulnerable to attacks. I'll make sure to review my notes on IoT security best practices before answering.
TI
Timothy
1 year ago
Hmm, I think the key here is making sure the on-premises applications can only access the Google APIs through the Cloud Interconnect and not the public internet. Option D seems to address that directly.
TO
Toshia
1 year ago
This seems straightforward. Alibaba Cloud's Kubernetes service can integrate and manage Kubernetes clusters hosted anywhere, not just on their own cloud platform.