100-150 Question 269
Single answerA network administrator is troubleshooting an issue where employees are unable to access a web application hosted on an external server. After reviewing the firewall configuration, the administrator notices there is a rule blocking TCP traffic on port 443. What action should the administrator take to resolve this issue?
- A
Remove the rule blocking TCP traffic on port 443.
- B
Add a new rule to block TCP traffic on port 80.
- C
Permit UDP traffic on port 443.
- D
Add a new rule to allow TCP traffic on port 443.
Show answer and explanation
Correct answer: D
Explanation
Web applications using HTTPS rely on TCP traffic over port 443. If a firewall blocks this traffic, users cannot access the application. The best practice is to explicitly add a rule to allow TCP traffic on port 443 rather than removing the blocking rule, as this maintains clarity and control within the firewall configuration.
- A. Incorrect.
Removing the rule blocking TCP traffic on port 443 would resolve the issue, but it is not the best practice. Instead, a new rule should be explicitly added to allow the desired traffic.
- B. Incorrect.
Blocking TCP traffic on port 80 would not solve the issue because port 80 is typically used for HTTP traffic, not HTTPS.
- C. Incorrect.
Permitting UDP traffic on port 443 would not resolve the issue because HTTPS traffic relies on TCP, not UDP.
- D. Correct.
Adding a new rule to allow TCP traffic on port 443 ensures that HTTPS traffic can pass through the firewall while maintaining a clear and organized ruleset.