nerdexam
CompTIA

SY0-501 · Question #161

Lab Sim - Configure the Firewall Task: Configure the firewall (fill out the table) to allow these four rules: - Only allow the Accounting computer to have HTTPS access to the Administrative server…

The correct firewall rules map each requirement to specific source IPs, destination IPs, ports, and protocols: HTTPS uses TCP port 443, SCP uses TCP port 22, and the IT computer requires two separate rules to reach both Administrative Server 1 and Server 2. Firewall rules must…

Submitted by zhang_li· Mar 4, 2026CompTIA Security+ Domain 3: Implementation - Implementing secure network architecture concepts including firewall rules, port/protocol management, and least-privilege network access control.

Question

Lab Sim - Configure the Firewall Task: Configure the firewall (fill out the table) to allow these four rules: - Only allow the Accounting computer to have HTTPS access to the Administrative server. - Only allow the HR computer to be able to communicate with the Server 2 System over SCP. - Allow the IT computer to have access to both the Administrative Server 1 and Administrative Server 2 Answer: Use the following answer for this simulation task. Below table has all the answers required for this question.

Exhibits

SY0-501 question #161 exhibit 1
SY0-501 question #161 exhibit 2
SY0-501 question #161 exhibit 3

Explanation

The correct firewall rules map each requirement to specific source IPs, destination IPs, ports, and protocols: HTTPS uses TCP port 443, SCP uses TCP port 22, and the IT computer requires two separate rules to reach both Administrative Server 1 and Server 2. Firewall rules must be precise - specifying the exact source, destination, port, and protocol ensures least-privilege access while blocking unintended traffic. Using 'Allow' as the action explicitly permits only the defined traffic, while an implicit deny handles everything else.

Topics

#Firewall Configuration#Network Security#Access Control#Port and Protocol Mapping

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice