SK0-004 · Question #32
Users report that an application is unable to connect to a server on the same network segment. Which of the following is the MOST likely reason?
The correct answer is D. The application is using a port that is closed on the server. On the same network segment, firewalls and DMZ configurations are not in the traffic path, so a closed port on the destination server is the most likely cause of a connection failure.
Question
Users report that an application is unable to connect to a server on the same network segment. Which of the following is the MOST likely reason?
Options
- AThe external firewall is preventing access to the server.
- BThe DMZ is incorrectly configured.
- CThe syslog server detects malware on the server.
- DThe application is using a port that is closed on the server.
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- D93% (28)
Why each option
On the same network segment, firewalls and DMZ configurations are not in the traffic path, so a closed port on the destination server is the most likely cause of a connection failure.
An external firewall only inspects traffic crossing network boundaries; devices on the same segment communicate via Layer 2 switching and bypass the external firewall entirely.
A DMZ is a network architecture zone separating public-facing servers from the internal network; it is irrelevant for two hosts on the same network segment.
A syslog server is a passive log collection system and does not have the ability to block or prevent application connections, even if it logs malware detections.
When two hosts are on the same network segment, traffic flows directly without passing through an external firewall or router-based ACLs. If the server's local firewall or service configuration has the required application port closed or the service is not listening, the TCP connection will be refused. This is the most direct and common reason an application-level connection fails within a flat network.
Concept tested: Application connectivity failure - closed server port
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/configure
Topics
Community Discussion
No community discussion yet for this question.