Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 2 Question 13 Discussion

Posted by Bernardine on May 05, 2022 at 12:33 PM

Which of the following should NOT normally be allowed through a firewall?

Suggested Answer: A

The Simple Network Management Protocol (SNMP) is a useful tool for remotely managing network devices.

Since it can be used to reconfigure devices, SNMP traffic should be blocked at the organization's firewall.

Using a VPN with encryption or some type of Tunneling software would be highly recommended in this case.

Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint.


Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
JU
Julene 11 months ago
I thought HTTP was always allowed, what's the deal?
AN
Anabel 12 months ago
SMTP is essential for email, so it should be fine.
LA
Lavonda 12 months ago
Wait, why would anyone allow SNMP through?
TW
Twanna 12 months ago
Totally agree, it can expose sensitive info!
RA
Raymon 1 year ago
SNMP is usually restricted by firewalls.
AR
Arletta 1 year ago
I feel like SNMP is used for monitoring, so it makes sense to block it, but I need to double-check that.
LE
Lelia 1 year ago
HTTP is usually allowed, right? But I can't recall if SSH is ever restricted.
PE
Peggie 1 year ago
I remember practicing a question about firewall rules, and I think SMTP was often flagged as risky.
HE
Helaine 1 year ago
I think SNMP might be the one that shouldn't be allowed through a firewall, but I'm not entirely sure.
MA
Marcelle 1 year ago
Okay, I think I've got a good handle on this. The key things to focus on are the behavior of the PDF output file, the differences between running on client vs. enterprise servers, and the controls around simultaneous job execution. I feel pretty confident I can identify the two true statements.
KA
Kate 1 year ago
I'm pretty confident that the answer is Service Composability. The question clearly states that the issue was the service not being designed to participate in more than one service composition, which is exactly what the Service Composability principle addresses.
EM
Emelda 1 year ago
I vaguely recall something about how objectives give detailed attributes, so maybe option E is relevant, but I need to double-check that.
KA
Kati 1 year ago
Okay, I've got this. The key advantages of virtual teams are reduced costs, flexibility in team composition, and improved communication. I'll make sure to select all the options that match those advantages.
DE
Deane 1 year ago
Hmm, I'm a bit confused by the wording here. I'll need to re-read the options carefully to make sure I understand what they're asking.
0/2000 characters

Save Cancel