GSLC · Question #368
Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for Internet Access. He wants to fulfill the following goals: - No external traffic should be…
The correct answer is D. Proxy Server. A proxy server satisfies both requirements - it acts as an intermediary preventing direct external traffic from reaching internal hosts, and it enables administrators to enforce URL-based content filtering to restrict which websites users can visit.
Question
Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for Internet Access. He wants to fulfill the following goals:
- No external traffic should be allowed into the network.
- Administrators should be able to restrict the websites which can be
accessed by the internal users. Which of the following technologies should he use to accomplish the above goals? (Click the Exhibit button on the toolbar to see the case study.)
Options
- AInternet Connection Sharing (ICS)
- BNetwork Address Translator (NAT)
- CFirewall
- DProxy Server
- ERouting and Remote Access Service (RRAS)
How the community answered
(21 responses)- A10% (2)
- C5% (1)
- D81% (17)
- E5% (1)
Why each option
A proxy server satisfies both requirements - it acts as an intermediary preventing direct external traffic from reaching internal hosts, and it enables administrators to enforce URL-based content filtering to restrict which websites users can visit.
Internet Connection Sharing simply allows multiple devices to share a single internet connection and provides no mechanism for restricting access to specific websites.
NAT hides internal IP addresses and prevents unsolicited inbound connections, but it does not provide URL-based or domain-based website filtering for outbound user traffic.
A traditional firewall can block inbound traffic using port and IP-based rules, but it does not perform application-layer URL filtering to restrict which specific websites internal users are permitted to visit.
A proxy server sits between internal clients and the internet, so all outbound requests are made by the proxy on behalf of users, which inherently blocks direct external-to-internal traffic. It also provides content filtering and access control lists that allow administrators to permit or deny access to specific websites, satisfying both stated goals simultaneously.
RRAS provides routing and remote access VPN services in Windows environments and is not designed to filter or restrict user web browsing based on destination websites.
Concept tested: Proxy server for content filtering and inbound traffic control
Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/core-network-guide
Topics
Community Discussion
No community discussion yet for this question.