100-150 Question 267
Single answerA company’s firewall has been configured to block all incoming traffic except for specific rules that allow necessary services. Users report they are unable to access a web application hosted on a server within the company’s network. The firewall administrator investigates and finds the following rule applied to the firewall:
ALLOW TCP 80, 443 FROM ANY TO 192.168.1.10
What is the most likely reason users are unable to access the web application?
- A
The firewall rule is missing the UDP protocol for ports 80 and 443.
- B
The IP address 192.168.1.10 is incorrect or unreachable.
- C
The rule does not allow traffic originating from the internal network.
- D
The rule does not include port 8080, which may be required for the web application.
Show answer and explanation
Correct answer: B
Explanation
The firewall rule is properly configured to allow HTTP and HTTPS traffic (ports 80 and 443) using the correct protocol (TCP). However, if the IP address 192.168.1.10 is incorrect or the server is unreachable, users will not be able to access the web application. This highlights the importance of verifying the accuracy of the destination IP address when troubleshooting firewall-related connectivity issues.
- A. Incorrect.
Web applications typically use TCP for ports 80 (HTTP) and 443 (HTTPS). UDP is not relevant in this context unless a specific application explicitly requires it, which is uncommon for typical web traffic.
- B. Correct.
If the IP address 192.168.1.10 is incorrect or unreachable, the firewall rule would not successfully direct traffic to the correct web application server. This is the most likely reason for the issue.
- C. Incorrect.
The rule allows traffic 'FROM ANY,' which includes both external and internal sources, so internal traffic is not blocked.
- D. Incorrect.
Port 8080 can sometimes be used for web applications, but the question specifies that the rule is already configured for standard web ports 80 and 443. There's no indication that the application requires port 8080.