A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?

The correct answer is D. Allow List. An allow list (whitelist) implements an implicit deny-all policy: only explicitly permitted traffic is allowed, and everything else is blocked by default. This is the most restrictive approach possible because unknown or unlisted traffic is automatically denied. URL filtering…

Cloud Network Security

Question

Options

AURL filtering
BFile blocking
CNetwork security group
DAllow List

How the community answered

(55 responses)

A
2% (1)
B
5% (3)
C
4% (2)
D
89% (49)

Explanation

An allow list (whitelist) implements an implicit deny-all policy: only explicitly permitted traffic is allowed, and everything else is blocked by default. This is the most restrictive approach possible because unknown or unlisted traffic is automatically denied. URL filtering (A) restricts access to specific web destinations but does not control all network traffic. File blocking (B) prevents certain file types from traversing the network but is a narrow, content-focused control. A network security group (C) is a cloud-based access control mechanism that can enforce allow/deny rules, but the concept of an allow list is the underlying principle that makes any ruleset maximally strict - configuring an NSG with an allow-list approach is what makes it strict, so the allow list principle is the correct answer.

Topics

#Firewall rules#Network security policy#Allow List#Security best practices

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice