70-648 · Question #88
Microsoft 70-648 Exam Your network contains a server named Server1 that has the Routing and Remote Access service (RRAS) role service installed. Server1 provides access to the internal network by…
The correct answer is A. An outbound filter that has the following configurations: D. An inbound filter that has the following configurations. We are told the solution must minimize the # of open ports. Right away, this eliminates the 2 answers specifying "Port: Any" We need users to access the web site on Server1 using HTTP (port 80), so we need an oubtound and inbound filter. Only 1 inbound filter meets the…
Question
Microsoft 70-648 Exam Your network contains a server named Server1 that has the Routing and Remote Access service (RRAS) role service installed. Server1 provides access to the internal network by using Point-to-Point Tunneling Protocol (PPTP). Static RRAS filters on the external interface of Server1 allow only PPTP. The IP address of the external interface is 131.107.1.100. You install the Web Server (IIS) role on Server1. You need to ensure that users on the Internet can access a Web site on Server1 by using HTTP. The solution must minimize the number of open ports on Server1. Which two static RRAS filters should you configure on Server1? (Each Answer presents part of the solution. Choose two.)
Options
- AAn outbound filter that has the following configurations:
- BAn outbound filter that has the following configurations:
- CAn outbound filter that has the following configurations:
- DAn inbound filter that has the following configurations:
- EAn inbound filter that has the following configurations:
How the community answered
(25 responses)- A72% (18)
- B4% (1)
- C8% (2)
- E16% (4)
Explanation
We are told the solution must minimize the # of open ports. Right away, this eliminates the 2 answers specifying "Port: Any" We need users to access the web site on Server1 using HTTP (port 80), so we need an oubtound and inbound filter. Only 1 inbound filter meets the requirements, so we need to determine which outbound filter is correct. The only difference between the 2 outbound filters for port 80 is that one specifies the protocol must be TCP, the other says TCP (established). In other words, this means it will only allow previously established TCP connections to get out from the web. This is the rule we want, as it is the most secure and will only let packets out to clients that have connected to the site first. If we allow all TCP connections out, any compromise of the computer or malfunction of TCP program on the server could cause undesired effects for our users.
Topics
Community Discussion
No community discussion yet for this question.