Exam SY0-401 All QuestionsBrowse all questions from this exam
Question 14

Users are unable to connect to the web server at IP 192.168.0.20. Which of the following can be inferred of a firewall that is configured ONLY with the following

ACL?

PERMIT TCP ANY HOST 192.168.0.10 EQ 80

PERMIT TCP ANY HOST 192.168.0.10 EQ 443

    Correct Answer: D

    The firewall configuration shown has rules that explicitly allow TCP traffic to IP 192.168.0.10 on ports 80 and 443. However, users are trying to connect to IP 192.168.0.20, which is not mentioned in the rules. This indicates that the firewall applies an implicit deny policy, meaning any traffic not explicitly allowed is denied by default. Thus, traffic to 192.168.0.20 is denied because there is no rule permitting it.

Discussion
slackbotOption: C

first, the IP in the rules does not match the question IP second - implicit deny will not cause problems if explicit allow is present - your own answer contradicts with itself - see last sentence the only reasonable answer is C