Exam SY0-501 topic 1 question 105 discussion

The Answer is A, Poor write up, though.

A is correct - after further thought "should be configured to prevent user traffic form matching the implicit deny rule" implies ACLs. It doesn't say that the implicit deny will be removed.

comptia - guess what i am thinking off you should NEVER prevent users from hitting the deny all - after all, it is their for a reason ACLs might take lots of time to setup, so - guess if comptia refer to an immediate solution (temporary - A) or permanent solution (B)

setting an ACL is fine, but how would you know if you've missed specific software used by the organisation? You need a better picture of what ports and protocols need to be allowed, so its A

Jesus questions are so poorly worded. But yes A is the answer.

“New Firewall”, “Configuration not added”. Firewalls by default have an implicit deny. So configure to not match implicit deny which effectively also means configuring rules to allow inbound and outbound traffic. A is correct

A, prevent user traffic from matching the implicit deny rule.

should be B, as an ''unconfigured firewall'' has rule of allow any any

fw best practise are to setup last rule ( on the bottom) to implicitly deny. It mean deny all which is not mention in a rules above.

testtest

B is correct. A would in essence allow ALL traffic - wide open. B would provide access rules to allow only desired traffic.

I agree w/ AnAverageUser, I pondered at this for like an hour.. Although the question is poorly worded (a trademark of CompTIA), I believe the question is pointing towards an "immediate" remedy to the current situation which is providing end users immediate access to the rest of the (internal?) organization's network. B would be like setting rules at a larger scale for the organzation connecting to an external network/the Internet.

I think it should be B. Since the there are many ways to prent traffic from matching the implicit deny rule. We nee to configure the inbound and outbound user traffic. Does anyone agree ?