A request has been approved for a vendor to access a new internal server using only HTTPS and SSH to manage the back-end system for the portal. Internal users just need HTTP and HTTPS access to all…

Question

Exhibits

Options

• AMove line 3 below line 4 and change port 80 to 443 on line 4.
• BMove line 3 below line 4 and add port 443 to line.
• CMove line 4 below line 5 and add port 80 to 8080 on line 2.
• DAdd port 22 to line 2.
• EAdd port 22 to line 5.
• FAdd port 443 to line 2.
• GAdd port 443 to line 5.

• A
  59% (13)
• B
  5% (1)
• D
  18% (4)
• E
  14% (3)
• G
  5% (1)

Explanation

The firewall ruleset must be tuned to grant the vendor SSH (port 22) and HTTPS (port 443) externally, while internal users get HTTP (port 80) and HTTPS (port 443). Option A corrects an ordering issue - moving line 3 below line 4 ensures the more-specific external vendor rule is evaluated correctly - and fixes a port reference to 443 for the vendor's HTTPS requirement. Option F adds port 443 to the internal users' rule (line 2) so HTTPS is permitted alongside HTTP for internal access. Without these two changes, either the vendor's encrypted access or internal HTTPS access would be blocked by the existing rule order and omissions.

No community discussion yet for this question.