6.1. Describe How Firewalls Operate to Filter Traffic. 100-150 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is migrating from a legacy default-allow firewall to a default-deny firewall. The migration team is concerned about breaking existing applications. Which approach best balances security and operational continuity?

   • ASwitch production to default-deny immediately and rely on user reports to add rules.
   • BUse default-deny but log all denied traffic and review logs weekly to add rules.
   • CKeep default-allow but add deny rules for known malicious traffic.
   • DDeploy the default-deny policy in a test environment, monitor traffic, and add explicit allow rules for legitimate traffic before switching production.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a firewall rule, what does the 'action' field specify?

   • AThe logging level for the rule
   • BWhether the rule is enabled or disabled
   • CThe priority of the rule among other rules
   • DWhether to permit or deny matching traffic
   Reveal Solution Discussion Select an answer first
4. 13application · easy

   A firewall has a default-deny policy. The administrator needs to allow internal users to access an external database on TCP port 3306. Which rule is necessary?

   • AAllow all traffic from internal network to any.
   • BAllow UDP from internal network to any on port 3306.
   • CAllow TCP from any to internal network on port 3306.
   • DAllow TCP from internal network to any on port 3306.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A firewall rule is set to allow all UDP traffic. Which type of traffic would be permitted by this rule?

   • ADNS queries
   • BFile transfer via FTP
   • CEmail delivery via SMTP
   • DSecure web browsing (HTTPS)
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A firewall is configured with a default-deny policy. The administrator adds a rule to allow outbound HTTPS (TCP 443) from the internal network. What happens to outbound traffic on port 80 (HTTP)?

   • AIt is blocked only if there is an explicit deny rule for port 80.
   • BIt is allowed because the HTTPS rule also covers HTTP.
   • CIt is allowed because the firewall permits all outbound traffic by default.
   • DIt is blocked because no rule allows it and the default action is deny.
   Reveal Solution Discussion Select an answer first