Firewalls · Question 12 of 12
A review finds a firewall rule "Allow everything from anywhere to anywhere", created two years ago for a test. What needs to be done?
2 answers are correct. Hard
Show answer
Answer
- C Clarify the process gap
- D Replace it with narrowly defined rules
Explanation
An any-any rule practically cancels out the firewall. It is replaced with rules that only allow necessary traffic. The finding also reveals a process gap: rules need owners, a justification, an expiry date and regular review. At the end of the rule set, it would still allow all remaining traffic.