nerdexam
GIAC

GSNA · Question #196

Andrew works as a Network Administrator for Infonet Inc. The company has a Windows 2003 domain-based network. The network has five Windows 2003 member servers and 150 Windows XP Professional client…

The correct answer is A. Enable the IP packet filter. D. Permit all the ports on the network adapter that uses the IP address 16.5.7.1. E. Permit only port 80 on the network adapter that uses the IP address 142.100.10.6. In order to configure the IIS server to allow only Web communication over the Internet, Andrew will have to use IP packet filtering to permit only port 80 on the network adapter that uses the IP address 142.100.10.6 for connecting to the Internet. This is because Web…

Windows System Auditing

Question

Andrew works as a Network Administrator for Infonet Inc. The company has a Windows 2003 domain-based network. The network has five Windows 2003 member servers and 150 Windows XP Professional client computers. One of the member servers works as an IIS server. The IIS server is configured to use the IP address 142.100.10.6 for Internet users and the IP address 16.5.7.1 for the local network. Andrew wants the server to allow only Web communication over the Internet. He also wants to enable the local network users to access the shared folders and other resources. How will Andrew configure the IIS server to accomplish this? (Choose three)

Options

  • AEnable the IP packet filter.
  • BPermit all the ports on the network adapter that uses the IP address 142.100.10.6.
  • CPermit only port 25 on the network adapter that uses the IP address 142.100.10.6.
  • DPermit all the ports on the network adapter that uses the IP address 16.5.7.1.
  • EPermit only port 80 on the network adapter that uses the IP address 142.100.10.6.

How the community answered

(46 responses)
  • A
    78% (36)
  • B
    15% (7)
  • C
    7% (3)

Explanation

In order to configure the IIS server to allow only Web communication over the Internet, Andrew will have to use IP packet filtering to permit only port 80 on the network adapter that uses the IP address 142.100.10.6 for connecting to the Internet. This is because Web communication uses the Hyper Text Transfer Protocol (HTTP) that uses the TCP port 80. IP packet filtering restricts the IP traffic received by the network interface by controlling the TCP or UDP port for incoming data. Furthermore, Andrew wants to allow local users to access shared folders and all other resources. Therefore, Andrew will have to enable all the ports on the network adapter that uses the IP address 16.5.7.1 for the local network.

Topics

#IIS IP packet filtering#port filtering#web server security#dual-homed server

Community Discussion

No community discussion yet for this question.

Full GSNA Practice