nerdexam
CompTIA

CV0-002 · Question #37

An administrator is testing a new web server from outside of the corporate firewall. The administrator performs a test from a single PC and the web server responds accordingly. The administrator…

The correct answer is E. Firewall. A single PC can reach the web server, but multiple VMs behind NAT cannot connect concurrently to the same web server. This indicates that a network security device is blocking the burst of connections, likely a firewall.

Troubleshooting

Question

An administrator is testing a new web server from outside of the corporate firewall. The administrator performs a test from a single PC and the web server responds accordingly. The administrator then provisions several virtual machines on a network behind NAT and uses them to perform the same operation on the web server at the same time, but thereafter soon discovers that none of the machines can reach the web server. Which of the following could be responsible?

Options

  • AIPS
  • BBlacklisting
  • CIDS
  • DWhitelisting
  • EFirewall

How the community answered

(51 responses)
  • A
    4% (2)
  • B
    6% (3)
  • C
    2% (1)
  • D
    16% (8)
  • E
    73% (37)

Why each option

A single PC can reach the web server, but multiple VMs behind NAT cannot connect concurrently to the same web server. This indicates that a network security device is blocking the burst of connections, likely a firewall.

AIPS

An IPS (Intrusion Prevention System) actively blocks detected malicious traffic, but a firewall is a more general device that controls all traffic based on rules, making it a broader and more common cause for blocking legitimate-looking, but high-volume, connections.

BBlacklisting

Blacklisting involves explicitly denying access to specific IP addresses or services, which is a policy or rule that a firewall might enforce, but 'Firewall' is the device itself responsible for enforcing such rules.

CIDS

An IDS (Intrusion Detection System) monitors network traffic for suspicious activity and generates alerts but typically does not actively block traffic, unlike a firewall or IPS.

DWhitelisting

Whitelisting involves explicitly allowing access only from specified IP addresses or services and denying all others, which is also a policy or rule that a firewall might enforce, but 'Firewall' is the device responsible for enforcement.

EFirewallCorrect

A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. In this scenario, the firewall is likely configured to detect and block a sudden increase in connection attempts from what appears to be a single external IP address (due to NAT), interpreting it as a potential attack or exceeding connection limits, thus preventing the multiple virtual machines from reaching the web server.

Concept tested: Firewall behavior with NAT and connection limits

Source: https://learn.microsoft.com/en-us/azure/firewall/overview

Topics

#firewall#NAT#network troubleshooting#connectivity issues

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice