200-201 Question 231
Select 3A cybersecurity analyst is tasked with configuring a firewall to restrict access to a web server hosted in their organization's DMZ. The web server should only allow HTTP and HTTPS traffic from the internet. Which of the following configurations should be implemented on the firewall?
- A
Allow inbound traffic on TCP port 80 and 443 to the web server's IP address
- B
Allow inbound traffic on all ports to the web server's IP address
- C
Block all inbound traffic except TCP port 80 and 443 to the web server's IP address
- D
Allow outbound traffic from the web server on any port
- E
Block outbound traffic from the web server on all ports
Show answer and explanation
Correct answers: A, C, D
Explanation
To secure a web server in the DMZ, it is essential to configure the firewall to allow only the necessary inbound traffic (HTTP and HTTPS) while blocking all other inbound traffic. Outbound traffic should generally be allowed to ensure the server can respond to client requests. These configurations reduce the attack surface and ensure the web server operates securely and efficiently.
- A. Correct.
This is a correct option because HTTP and HTTPS traffic use TCP ports 80 and 443 respectively, and these are the only ports that need to be allowed for the web server.
- B. Incorrect.
This is incorrect because allowing all ports would expose the web server to unnecessary risks, including unauthorized access and exploitation.
- C. Correct.
This is a correct option as it ensures that only HTTP and HTTPS traffic are allowed to reach the web server, enhancing security by blocking other traffic.
- D. Correct.
This is a correct option because outbound traffic from the web server (such as responses to incoming requests) should be allowed on any port to ensure normal functionality.
- E. Incorrect.
This is incorrect because blocking all outbound traffic would prevent the web server from responding to legitimate requests, disrupting its operation.