CompTIA
SY0-701 · Question #17
While troubleshooting a firewall configuration, a technician determines that a "deny any" policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #17. The question stem and answer options stay visible for context.
Submitted by ashley.k· Mar 6, 2026Security operations
Question
While troubleshooting a firewall configuration, a technician determines that a "deny any" policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?
Options
- ADocumenting the new policy in a change request and submitting the request to change
- BTesting the policy in a non-production environment before enabling the policy in the production
- CDisabling any intrusion prevention signatures on the 'deny any' policy prior to enabling the new
- DIncluding an 'allow any1 policy above the 'deny any' policy
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Firewall management#Change management#Policy testing#Operational best practices