N10-005 · Question #836
N10-005 Question #836: Real Exam Question with Answer & Explanation
The correct answer is D: Implicit deny. Implicit deny is a fundamental firewall principle: any traffic not explicitly permitted by a rule is denied by default. The absence of a block rule does not mean traffic is allowed - firewalls require an explicit allow rule for traffic to pass. Since there is no rule permitting R
Question
Options
- AStateful inspection
- BNAT/PAT
- CPort security
- DImplicit deny
Explanation
Implicit deny is a fundamental firewall principle: any traffic not explicitly permitted by a rule is denied by default. The absence of a block rule does not mean traffic is allowed - firewalls require an explicit allow rule for traffic to pass. Since there is no rule permitting RDP (TCP port 3389), the implicit deny at the end of the rule set drops the connection. Stateful inspection tracks active connection state. NAT/PAT translates addresses and ports but does not make allow/deny decisions here. Port security is a Layer 2 switch feature that limits MAC addresses per port.
Community Discussion
No community discussion yet for this question.