Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6…

The correct answer is C. TCP port 80 and ICMP. For IPv6 to function properly, ICMPv6 is essential - far more so than in IPv4. IPv6 relies on ICMPv6 for Neighbor Discovery Protocol (NDP), which replaces ARP for address resolution and router discovery. Blocking ICMP breaks IPv6 connectivity entirely. TCP port 80 is required…

Security architecture

Question

Pete, a network administrator, is implementing IPv6 in the DMZ. Which of the following protocols must he allow through the firewall to ensure the web servers can be reached via IPv6 from an IPv6 enabled Internet host?

Options

ATCP port 443 and IP protocol 46
BTCP port 80 and TCP port 443
CTCP port 80 and ICMP
DTCP port 443 and SNMP

How the community answered

(16 responses)

A
6% (1)
B
6% (1)
C
75% (12)
D
13% (2)

Explanation

For IPv6 to function properly, ICMPv6 is essential - far more so than in IPv4. IPv6 relies on ICMPv6 for Neighbor Discovery Protocol (NDP), which replaces ARP for address resolution and router discovery. Blocking ICMP breaks IPv6 connectivity entirely. TCP port 80 is required for standard HTTP web server access. Option A is wrong because IP protocol 46 is RSVP, unrelated to web or IPv6. Option B omits the ICMPv6 requirement critical for IPv6. Option D pairs SNMP with web traffic, which is unrelated to client access.

Topics

#IPv6#DMZ#ICMPv6#firewall rules

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice