Mitigation techniques · Question 11 of 12
A firewall has these rules in this order: 1. Allow TCP from all sources to all destinations on port 443. 2. Deny everything from the guest network to the server network. 3. Deny everything. What is the problem?
1 answer is correct. Hard
Show answer
Answer
- C Rule 1 allows HTTPS from the guest network to servers before rule 2 applies
Explanation
With "first match", the first matching rule is applied. An overly broad allow at the top punches a hole in the more specific block below. Specific blocks belong before general allows.