SY0-401 Exam QuestionsBrowse all questions from this exam

SY0-401 Exam - Question 14


Users are unable to connect to the web server at IP 192.168.0.20. Which of the following can be inferred of a firewall that is configured ONLY with the following

ACL?

PERMIT TCP ANY HOST 192.168.0.10 EQ 80

PERMIT TCP ANY HOST 192.168.0.10 EQ 443

Show Answer
Correct Answer: D

The firewall configuration shown has rules that explicitly allow TCP traffic to IP 192.168.0.10 on ports 80 and 443. However, users are trying to connect to IP 192.168.0.20, which is not mentioned in the rules. This indicates that the firewall applies an implicit deny policy, meaning any traffic not explicitly allowed is denied by default. Thus, traffic to 192.168.0.20 is denied because there is no rule permitting it.

Discussion

1 comment
Sign in to comment
slackbotOption: C
Jul 21, 2024

first, the IP in the rules does not match the question IP second - implicit deny will not cause problems if explicit allow is present - your own answer contradicts with itself - see last sentence the only reasonable answer is C