SK0-003 · Question #77
Which of the following is the BEST way to allow web software through the server firewall?
The correct answer is A. Implement an application exception. To securely allow web software through a server's firewall, the most precise method is to implement an application exception.
Question
Which of the following is the BEST way to allow web software through the server firewall?
Options
- AImplement an application exception.
- BImplement an access control list (ACL).
- COpen the corporate firewall to allow port 80.
- DImplement port blocking on port 80.
How the community answered
(38 responses)- A79% (30)
- B3% (1)
- C5% (2)
- D13% (5)
Why each option
To securely allow web software through a server's firewall, the most precise method is to implement an application exception.
Implementing an application exception allows the specific web software executable to communicate through the server's firewall, rather than broadly opening a port, providing more granular control and enhanced security. This method ensures only the trusted application can use the allowed port, preventing other unauthorized processes from leveraging the open port.
An access control list (ACL) is a broader concept used for network device access or file system permissions, not typically for allowing a specific application through a server's host-based firewall.
Opening the corporate firewall to allow port 80 is a network-level change, which is too broad and insecure for allowing web software through the server's own host-based firewall.
Implementing port blocking on port 80 would prevent web software from functioning, as web traffic typically uses port 80 (HTTP) or 443 (HTTPS).
Concept tested: Server firewall application exceptions
Source: https://learn.microsoft.com/windows/security/threat-protection/windows-firewall/create-an-inbound-program-or-service-rule
Topics
Community Discussion
No community discussion yet for this question.