Exam 312-50v11 topic 1 question 34 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 34
Topic #: 1

To reach a bank web site, the traffic from workstations must pass through a firewall. You have been asked to review the firewall configuration to ensure that workstations in network 10.10.10.0/24 can only reach the bank web site 10.20.20.1 using https. Which of the following firewall rules meets this requirement?

A. if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 443) then permit
B. if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 80 or 443) then permit
C. if (source matches 10.20.20.1 and destination matches 10.10.10.0/24 and port matches 443) then permit
D. if (source matches 10.10.10.0 and destination matches 10.20.20.1 and port matches 443) then permit

Show Suggested Answer

Suggested Answer: A 🗳️

by Angelife at July 15, 2021, 3:40 p.m.

Comments

Submit Cancel

Kamal_SriLanka

Highly Voted 3 years, 5 months ago

if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 443) then permit self-explanatory 443 is https

upvoted 5 times

...

alodha100

Most Recent 10 months, 1 week ago

A is the correct answer here. No doubt about it.

upvoted 1 times

...

josevirtual

2 years, 2 months ago

Selected Answer: A

A is the correct answer

upvoted 1 times

...

MasterMark

2 years, 8 months ago

The key phrase in the question is, “workstations in network 10.10.10.0/24 can only reach the bank web site 10.20.20.1 using https”. Answers C and D do not have the address in the question 10.10.10.0/24 and are ruled out. Answer B is ruled out because port 80 does not use https This leaves answer A to be the correct answer.

upvoted 1 times

...

Novmejst

3 years, 1 month ago

A. if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 443) then permit

upvoted 1 times

...

MZAINUL

3 years, 4 months ago

@Sam_Fyl you don't have to specify the subnet. in real firewall configuration, an object with /24 IP address can be created to represent 10.10.10.0/24. On policy level it will show like that. Another object will be the 10.20.20.1/32 and port allowed only 443 (https)

upvoted 3 times