PCNSC · Question #31
A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs…
The correct answer is D. Rule #1: application: web-browsing; service: service-http; action: allow. goal: cleartext (web-browsing/http) on tcp/443 server hosts both http and https on 443 web-browsing on 443 must be checked before SSL application on 443 drops the packet http application-default = 80 so must use service-https for 443
Question
A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server hosts its contents over HTTP(S). Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule. Which combination of service and application, and order of Security policy rules, needs to be configured to allow cleartext web-browsing traffic to this server on tcp/443.
Options
- ARule #1: application: web-browsing; service: application-default; action: allow
- BRule #1: application: web-browsing; service: service-https; action: allow
- CRule # 1: application: ssl; service: application-default; action: allow
- DRule #1: application: web-browsing; service: service-http; action: allow
How the community answered
(45 responses)- A9% (4)
- B4% (2)
- C20% (9)
- D67% (30)
Explanation
goal: cleartext (web-browsing/http) on tcp/443 server hosts both http and https on 443 web-browsing on 443 must be checked before SSL application on 443 drops the packet http application-default = 80 so must use service-https for 443
Topics
Community Discussion
No community discussion yet for this question.