Which of the following rules appearing in an Internet firewall policy is inappropriate?

The correct answer is B. Firewalls shall be configured to transparently allow all outbound and inbound. Configuring firewalls to transparently allow all inbound and outbound traffic defeats the entire purpose of a firewall, which is to enforce selective access control. A firewall that passes all traffic provides zero security benefit and violates the principle of least privilege…

Submitted by ravi_2018· Apr 18, 2026Network and Communications Security

Question

Options

ASource routing shall be disabled on all firewalls and external routers.
BFirewalls shall be configured to transparently allow all outbound and inbound
CFirewalls should fail to a configuration that denies all services, and require a
DFirewalls shall not accept traffic on its external interfaces that appear to be coming

How the community answered

(48 responses)

A
4% (2)
B
94% (45)
D
2% (1)

Explanation

Configuring firewalls to transparently allow all inbound and outbound traffic defeats the entire purpose of a firewall, which is to enforce selective access control. A firewall that passes all traffic provides zero security benefit and violates the principle of least privilege and default-deny. Options A (disabling source routing to prevent IP spoofing/routing manipulation), C (fail-secure/default-deny on failure), and D (blocking traffic on external interfaces that appears to originate from internal addresses, i.e., anti-spoofing) are all sound, standard firewall security policy rules.

Topics

#Firewall Policy#Network Security#Security Best Practices#Traffic Filtering

Community Discussion

No community discussion yet for this question.

Full SSCP Practice