nerdexam
Microsoft

AZ-801 · Question #189

You have a server named Server1 that runs Windows Server. You install a custom app named App1 that is accessed by using TCP port 52310. Users report that they cannot access App1. You confirm that…

The correct answer is C. Create an inbound rule. To allow users to access App1 on Server1 via TCP port 52310, you must create an inbound rule in Windows Defender Firewall with Advanced Security.

Secure Windows Server on-premises and hybrid infrastructures

Question

You have a server named Server1 that runs Windows Server. You install a custom app named App1 that is accessed by using TCP port 52310. Users report that they cannot access App1. You confirm that App1 is running on Server1. You need to ensure that the users can access App1. The solution must only provide access to App1 on Server1. What should you do in Windows Defender Firewall with Advanced Security?

Options

  • ACreate an isolation connection security rule.
  • BCreate an outbound rule.
  • CCreate an inbound rule.
  • DFor the current profile, allow all inbound connections.

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    14% (4)
  • C
    72% (21)
  • D
    3% (1)

Why each option

To allow users to access App1 on Server1 via TCP port 52310, you must create an inbound rule in Windows Defender Firewall with Advanced Security.

ACreate an isolation connection security rule.

An isolation connection security rule is used for IPsec to secure communication between endpoints, not for simply opening a specific port for an application.

BCreate an outbound rule.

An outbound rule controls traffic originating from Server1, whereas users trying to access App1 require an incoming connection to Server1.

CCreate an inbound rule.Correct

An inbound rule in Windows Defender Firewall with Advanced Security controls incoming network traffic to Server1. By creating an inbound rule for TCP port 52310, you specifically permit users to connect to App1, ensuring access while adhering to the principle of least privilege by not opening other unnecessary ports.

DFor the current profile, allow all inbound connections.

Allowing all inbound connections for the current profile would open all ports on Server1, which violates the requirement to only provide access to App1.

Concept tested: Windows Firewall inbound rule configuration

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule

Topics

#Windows Defender Firewall#Network Security#Inbound Rules#Application Connectivity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-801 Practice