exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 158 discussion

Actual exam question from CompTIA's SY0-601
Question #: 158
Topic #: 1
[All SY0-601 Questions]

After a recent security incident, a security analyst discovered that unnecessary ports were open on a firewall policy for a web server. Which of the following firewall polices would be MOST secure for a web server?
A.

B.

C.

D.

Show Suggested Answer Hide Answer
Suggested Answer: D

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
stoneface
Highly Voted 2 years, 11 months ago
D) Any -> Any -> TCP 80 Allow Any -> Any -> TCP 443 Allow Any -> Any -> ANY Deny Although allowing 80 is not secure, it is the best answer of all
upvoted 68 times
Protract8593
2 years ago
Option C allows any insecure port, which is not the best configuration for securing a web server. The correct answer is option D: [Source Destination Port Action] Any Any TCP 80 Allow Any Any TCP 443 Allow Any Any Any Deny Explanation: Option D: This policy allows access only to TCP ports 80 (HTTP) and 443 (HTTPS), which are the standard ports for web communication and are considered secure. All other traffic is denied, providing a more secure configuration for a web server. Option D is the most secure firewall policy for a web server because it restricts access to only the necessary and secure ports (80 and 443) while denying all other traffic that could potentially be insecure or unnecessary for web server operations.
upvoted 4 times
...
banditring
2 years, 11 months ago
why? if C is saying Deny for port 80?
upvoted 2 times
Gigi42
1 year, 1 month ago
ADDITIONALLY, you don't start at the top with a DENY, you end with a DENY
upvoted 1 times
...
jgp
2 years, 10 months ago
Because in C you are opening any port by Allowing by default with the ANY -> ANY -> ANY -> Allow
upvoted 5 times
fryderyk
1 year, 7 months ago
Also worth to mention that port 80 open does not mean all data is leaked. It is a common practice to leave it open to allow for a redirect from 80 to 443.
upvoted 2 times
...
...
Smeevil
2 years, 10 months ago
Cause C allows any other traffic in the last line
upvoted 5 times
...
...
...
chael88
Highly Voted 2 years, 10 months ago
This one was not in my exam but one very similar. It asked to allow web server, sftp, DHCP but specifically block FTP. The answer was the one with port 21 blocked.
upvoted 17 times
...
roukettas
Most Recent 1 year ago
if you have a web server you configure your nginx to run in port 443 and handle request in port 80 any other ports should be blocked to protect your server not the application
upvoted 1 times
...
Pele9
1 year, 1 month ago
where ever you see "any - any - deny" or deny all as the last policy at the bottom, that is the most secure firewall policy configuration. It's a clean up rule.
upvoted 1 times
...
DriftandLuna
2 years ago
A, B & C all allow anything to anywhere using any port. Whilst D is not ideal it is the best option
upvoted 2 times
...
Tariktarek2016
2 years, 3 months ago
D is right
upvoted 1 times
...
scarceanimal
2 years, 5 months ago
D) implicit deny automatically makes it most secure of the rest imo.
upvoted 4 times
...
SecurityArt
2 years, 8 months ago
It's D Last line is Any --> Any --> Any --> Deny
upvoted 3 times
...
Iphy23
2 years, 9 months ago
The most correct answer is D
upvoted 2 times
...
inkedia3
2 years, 10 months ago
Wrote the exams yesterday and passed. Please pay attention to these PBQs. they were all on the exams. Funny I wasnt paying must attention to them till about three hours before my exams. Anyway I passed with 785 score... I will say give these questions 90% of your attention and look for the 10% from other sources...
upvoted 7 times
...
comeragh
2 years, 10 months ago
D - I agree with D being the correct answer here
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...