nerdexam
CompTIA

SK0-003 · Question #77

Which of the following is the BEST way to allow web software through the server firewall?

The correct answer is A. Implement an application exception. To securely allow web software through a server's firewall, the most precise method is to implement an application exception.

Security and disaster recovery

Question

Which of the following is the BEST way to allow web software through the server firewall?

Options

  • AImplement an application exception.
  • BImplement an access control list (ACL).
  • COpen the corporate firewall to allow port 80.
  • DImplement port blocking on port 80.

How the community answered

(38 responses)
  • A
    79% (30)
  • B
    3% (1)
  • C
    5% (2)
  • D
    13% (5)

Why each option

To securely allow web software through a server's firewall, the most precise method is to implement an application exception.

AImplement an application exception.Correct

Implementing an application exception allows the specific web software executable to communicate through the server's firewall, rather than broadly opening a port, providing more granular control and enhanced security. This method ensures only the trusted application can use the allowed port, preventing other unauthorized processes from leveraging the open port.

BImplement an access control list (ACL).

An access control list (ACL) is a broader concept used for network device access or file system permissions, not typically for allowing a specific application through a server's host-based firewall.

COpen the corporate firewall to allow port 80.

Opening the corporate firewall to allow port 80 is a network-level change, which is too broad and insecure for allowing web software through the server's own host-based firewall.

DImplement port blocking on port 80.

Implementing port blocking on port 80 would prevent web software from functioning, as web traffic typically uses port 80 (HTTP) or 443 (HTTPS).

Concept tested: Server firewall application exceptions

Source: https://learn.microsoft.com/windows/security/threat-protection/windows-firewall/create-an-inbound-program-or-service-rule

Topics

#server firewall#web server security#application exception#port security

Community Discussion

No community discussion yet for this question.

Full SK0-003 Practice