Exam 70-741 All Questions

View all questions & answers for the 70-741 exam

Exam 70-741 topic 1 question 99 discussion

Actual exam question from Microsoft's 70-741

Question #: 99
Topic #: 1

HOTSPOT -
You have an IP Filters Network Policy Server (NPS) template that is used by an NPS policy. The IP filters are configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by dodgeon at April 19, 2019, 8:53 a.m.

Comments

Submit Cancel

noppy

Highly Voted 6 years, 1 month ago

Answers are UDP and allow any ports. 192.168.0.0 / 255.255.255.0 is 192.168.0.1~192.168.0.255 192.168.10.100 / 255.255.0.0 is not rejected (means that allowed).

upvoted 23 times

lbs

5 years, 3 months ago

I agree. UDP and allow connection to any port

upvoted 5 times

...

adsl7

Highly Voted 5 years, 9 months ago

Answers is UDP and allow to connect to any ports

upvoted 12 times

...

asaproji

Most Recent 4 years, 5 months ago

WHAT IS THE CORRECT ANSWER THEN SOME RELIABLE PLEASE

upvoted 1 times

...

Yebubbleman

4 years, 6 months ago

The subnet masks don't match for either of them. Wouldn't that mean that both of them don't take effect?

upvoted 1 times

...

Rijvi

4 years, 7 months ago

The correct answer is TCP and allow any port...... 2nd ans is no doubt but the first ans lot of us getting wrong... think about it the first IP and Subnet for port 443 is under TCP .....

upvoted 1 times

Rijvi

4 years, 7 months ago

first IP address and Subnet musk for port 443 is under TCP protocol

upvoted 1 times

...

Sten111

4 years, 7 months ago

Answer: 1. Rule is for 172.16.0.0/16 172.16.0.0 - 172.16.255.255 TCP packets are blocked for port 433. 172.16.55.11 is within this range, therefore only UDP is allowed. 2. Rule is for 192.168.0.0/24 192.168.0.0 - 192.168.0.255 any packets blocked for Any port 192.168.10.100 does not fall within this range, rule will not apply. Therefore it can connect to any port. This is basic subnetting and i'm surprised there's so much disagreement here.

upvoted 9 times

jhgf

4 years, 5 months ago

thought the answers were 'All' and 'Allow at Any Port' based on reasoning similar to yours. I agree with your 192.168.. conclusion. Re: 172.16 - The rule is set for 172.16.0.0 /16 ( = the net part is 172.16) But then they tell you - we're sending one in on 172.16.55.11/24 (isn't this a different net. the net here is 172.16.55 .. ). ?

upvoted 1 times

...

yesboet

4 years, 8 months ago

udp and rejected

upvoted 1 times

...

TA77

4 years, 9 months ago

UDP and allow to connect to any ports.

upvoted 3 times

...

algerianphoenix

4 years, 11 months ago

Answers : UDP and Rejected. The filters are to deny not permit. Through 172.16.0.0/16 we deny port 443 on TCP, which will allow UDP Through 192.168.0.0/24 we deny everything, it's a block altogether.

upvoted 1 times

VeiN

4 years, 10 months ago

you block address range 192.168.0.0-192.168.0.255 but the address used is out of this range 192.168.10.100. Since the policy setting is on "Don`t permit packets from" it works as a blacklist (everything that on the list isn`t allow, everything that is not listed is allowed) So the answer here is UDP + allow PS I`ve seen similar question on other site but used the other setting and worked as whitelist.

upvoted 3 times

alexnt

4 years, 9 months ago

What is the answer for the white list question? Tcp Allowed to connect to any port ?

upvoted 1 times

alexnt

4 years, 9 months ago

Sorry I meant TCP and rejected? I'm talking about the question with the whitelist.

upvoted 1 times

...

Kamikazekiller

4 years, 11 months ago

Answers is UDP and allow to connect to any ports

upvoted 5 times

...

promaster

4 years, 11 months ago

Guys look at the subnet masks on both options, not in each rule.

upvoted 1 times

...

LeonSKanady

5 years ago

** Block List ** A) 192.168.0.0 (255.255.255.0) = 192.168.0.1 > 192.168.0.254 Target: 192.168.10.100 Result: Will allowed on all port. Reason: Target is out of blocked range. So it will be allowed. B) 172.16.0.0 (255.255.0.0) = 172.16.0.1 > 172.16.255.254 Target: 172.16.55.11 Result: Associated service linked with the target will be blocked. Rest of service is allowed. Reason: Target is inside of blocked range. So the service its carring (TCP), will be blocked. So only UDP is allowed. Correct me if i am wrong :)

upvoted 4 times

...

Dexvex

5 years ago

Eh none of the deny rules seem to match the traffic 1st dropdown - Packet destination is 172.16.55.11 /24 The relevant rule is Deny TCP to 172.16.0.0 /16 Since the mask is different, the rule doesn’t match at all 2nd dropdown - Packet destination is TCP to 192.168.10.100 /18 The relevant rule is Block ANY to 192.168.0.0 /24 Again the mask is different so the rule doesn’t match

upvoted 2 times

...

lbs

5 years, 3 months ago

Answer is UDP and Allow Connection to Any Port

upvoted 2 times

dansecu

5 years, 1 month ago

correct: UDP and Allow Connection to Any Port

upvoted 1 times

...

pekalyok

5 years, 3 months ago

guys have you looked exactly at masks in answers and on the picture? rethink again your answers =) for 172.x.x.x in the pic its 255.255.0.0 and in the answers it is 255.255.255.0, same difference in the 192 subnet and its masks! rethink your answers carefully! cuz it confused me a lot!

upvoted 1 times

pekalyok

5 years, 3 months ago

the complete reply is UDP and Allowed Any Port! UDP is allowed cuz the ip in the answer is falling in the subnet restriction listed in the nps deny rule. allowed any port is also falling under same conditions where the requested IP is out prohibited scope which means allow

upvoted 2 times

...

Justin0020

5 years, 4 months ago

I tested this in my lab, and i am 100% sure about it. You are doing this on network-level, so all hosts inside the networks have something to do with this. Because rule 2 says all TCP packets from 172.16.0.0/16 with port 443 are not allowed, only UDP is allowed. This is the first answer. Because rule 1 says all packets from 192.168.0.0/24 are not permitted you would say answer 2 is rejected. It is not. The question is if 192.168.10.100/16 is permitted. The subnet and network id of the IP-address are the reason why it is permitted. In short: 1. UDP 2. Allowed to connect to any port

upvoted 11 times

...

SmackedWookiee

5 years, 6 months ago

Why wouldn't the answer be All and Any Ports? The subnet masks in both questions don't match what's in the example, so the NPS policy not apply in either case.

upvoted 5 times

CAVALU2020

5 years, 3 months ago

agree 1. 172.16.0.0 /16 - Host Min 172.16.0.1 & Host Max - 172.16.255.254 172.16.55.11 /24 is not in the range Answer is ALL PACKETS 2. 192.168.0.0 /24 - Host Min - 192.168.0.1 - Host Max - 192.168.0.254 192.168.10.100 / 16 is not in the range Answer is : ALLOWED TO CONNECT TO ANY PORT

upvoted 4 times

...

Load full discussion...