100-150 Question 265
Single answerA network administrator is troubleshooting an issue where employees cannot access an internal web application hosted on a server within the company’s network. Upon inspection, the administrator finds that the firewall has a rule blocking TCP traffic coming into port 8080, which the application uses. What action should the administrator take to resolve the issue while maintaining security?
- A
Remove the firewall rule entirely to allow all incoming traffic.
- B
Modify the firewall rule to allow TCP traffic on port 8080 to the server's IP address.
- C
Enable all traffic on the firewall and monitor for unusual activity.
- D
Create a new rule to block all traffic except TCP traffic on port 8080 to the server's IP address.
Show answer and explanation
Correct answer: B
Explanation
The issue is caused by the firewall blocking TCP traffic on port 8080, which the web application uses. To resolve this, the administrator should modify the firewall rule to permit TCP traffic on port 8080 specifically to the server's IP address. This approach ensures the application is accessible while maintaining a secure and restrictive firewall configuration.
- A. Incorrect.
Removing the firewall rule entirely is not secure because it would allow unrestricted access to the network, exposing it to potential threats.
- B. Correct.
Modifying the firewall rule to allow TCP traffic on port 8080 to the server's IP address is the appropriate action. It resolves the issue while maintaining security by restricting access to the specific port and destination.
- C. Incorrect.
Enabling all traffic on the firewall is highly insecure and not a recommended practice, as it would expose the network to a wide range of threats.
- D. Incorrect.
Creating a new rule to block all traffic except TCP traffic on port 8080 is unnecessary and overly restrictive. It could block other legitimate traffic needed for the network to function properly.