Exam N10-008 topic 1 question 687 discussion

To encrypt all traffic coming into the web server from outside the network, the following steps should be taken: Install a certificate on the firewall: The firewall should be configured to handle the encryption and decryption of HTTPS traffic. This involves installing a valid SSL/TLS certificate on the firewall to secure the incoming web traffic. Incoming port 80 traffic at the firewall should be forwarded to port 443 on the server: Since the web server is not capable of serving HTTPS traffic directly, incoming HTTP (port 80) traffic should be forwarded to port 443 (HTTPS) on the server by the firewall. This allows the firewall to handle the encryption and forward the secure traffic to the web server.

keywords: The server is not capable of serving HTTPS traffic directly (no port 443 on Server)

It would be uncommon these days to expect web users to connect to your web server over an un-encrypted internet connection i.e http. I'm going with D and E.

B and E

gpt: A. A certificate should be installed on the server. B. Incoming port 80 traffic at the firewall should be forwarded to port 443 on the server. Explanation: Install a certificate on the server (A): Even though the server cannot serve HTTPS traffic directly, you can install a certificate on the server to handle the encryption once the traffic reaches it. Forward port 80 traffic to port 443 at the firewall (B): Since the server cannot handle HTTPS traffic directly, the firewall can be configured to forward incoming port 80 (HTTP) traffic to port 443 (HTTPS) on the server, where the encryption can be applied. These measures allow encryption to be implemented at the firewall, even if the web server itself cannot handle HTTPS traffic directly.

I feel like its B over D because incoming port 80 (HTTP) traffic at the firewall should be forwarded to port 443 (HTTPS) on the server. This ensures that all HTTP traffic coming into the network is redirected to the HTTPS port (443) on the server, where the firewall can handle encryption.