nerdexam
CompTIA

SK0-003 · Question #106

An administrator needs to configure a server to restrict mail traffic to an application server for security reasons. Which of the following techniques can be used to manage this?

The correct answer is B. ACLs. To restrict specific mail traffic to an application server for security, Access Control Lists (ACLs) are the most effective technique for managing network flow.

Security and disaster recovery

Question

An administrator needs to configure a server to restrict mail traffic to an application server for security reasons. Which of the following techniques can be used to manage this?

Options

  • APAT
  • BACLs
  • CSubnet masking
  • DPort blocking

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    76% (13)
  • C
    12% (2)
  • D
    6% (1)

Why each option

To restrict specific mail traffic to an application server for security, Access Control Lists (ACLs) are the most effective technique for managing network flow.

APAT

Port Address Translation (PAT) is a form of Network Address Translation (NAT) used to map multiple private IP addresses to a single public IP address using different port numbers, not for traffic restriction.

BACLsCorrect

Access Control Lists (ACLs) are sets of rules applied to network devices like routers or firewalls that define which traffic is permitted or denied based on criteria such as source/destination IP address, port numbers, and protocols. By configuring an ACL, an administrator can explicitly block or allow mail traffic (e.g., SMTP on port 25 or SMTPS on ports 465/587) to or from the application server, providing granular security control.

CSubnet masking

Subnet masking is used to divide an IP network into smaller subnetworks and determine network/host portions of an IP address, not for restricting specific application traffic.

DPort blocking

Port blocking is a general concept of preventing traffic on certain ports, but ACLs are the specific technique or mechanism used to implement this controlled restriction.

Concept tested: Network traffic restriction using ACLs

Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html

Topics

#ACLs#network security#traffic filtering#firewall rules

Community Discussion

No community discussion yet for this question.

Full SK0-003 Practice