CompTIA
CAS-001 · Question #56
CAS-001 Question #56: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-001 to reveal the answer and full explanation for question #56. The question stem and answer options stay visible for context.
Question
A small company has recently placed a newly installed DNS server on the DMZ and wants to secure it by allowing Internet hosts to query the DNS server. Since the company deploys an internal DNS server, all DNS queries to that server coming from the company network should be blocked. An IT administrator has placed the following ACL on the company firewall: Testing shows that the DNS server in the DMZ is not working. Which of the following should the administrator do to resolve the problem?
Options
- AModify the SRC and DST ports of ACL 1
- BModify the SRC IP of ACL 1 to 0.0.0.0/32
- CModify the ACTION of ACL 2 to Permit
- DModify the PROTO of ACL 1 to TCP
Unlock CAS-001 to see the answer
You've previewed enough free CAS-001 questions. Unlock CAS-001 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.