N10-009 · Question #259
A new server is deployed in a trusted zone and is validated to be online with all appropriate services running. However, users in a perimeter network cannot access the server. Which of the following…
The correct answer is B. Update the firewall ACL to allow access to the new server. When users in a perimeter network cannot access a new server in a trusted zone, it indicates that a security policy or access control mechanism is blocking the communication.
Question
A new server is deployed in a trusted zone and is validated to be online with all appropriate services running. However, users in a perimeter network cannot access the server. Which of the following should a network administrator do to resolve the reported issue?
Options
- ACreate a TXT record on the DNS server for the new server.
- BUpdate the firewall ACL to allow access to the new server.
- CConfigure a static route for the user VLAN to the new server.
- DInsert a static ARP entry for the new server on the Layer 3 switch.
How the community answered
(28 responses)- A4% (1)
- B79% (22)
- C7% (2)
- D11% (3)
Why each option
When users in a perimeter network cannot access a new server in a trusted zone, it indicates that a security policy or access control mechanism is blocking the communication.
A TXT record on a DNS server provides textual information about a domain, such as SPF or DKIM records, and does not control network access between different security zones.
Firewalls are crucial for controlling traffic between different network segments and security zones. To allow users in the perimeter network to reach the new server in the trusted zone, the network administrator must explicitly update the firewall's Access Control List (ACL) to permit the necessary traffic flow.
If the server is online and reachable within its own zone, basic routing between the perimeter and trusted networks likely exists, so a static route wouldn't bypass a firewall blocking access.
Static ARP entries map IP addresses to MAC addresses within a local subnet and are not relevant for controlling access or routing traffic between different network zones separated by a firewall.
Concept tested: Firewall Access Control Lists (ACLs) for inter-zone communication
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-windows-firewall-with-advanced-security
Community Discussion
No community discussion yet for this question.