Certified Ethical Hacker CEH · Free Practice Question Medium
Question 64
You are information security manager at HDA. Few employees at HDA (having IP 11.11.0.1/24) browse the www.bank.com (IP 12.12.0.1) for official banking activity. You want to ensure that employees can browse the bank only through https service. Which of the following firewall rules you should establish:
- A A. If (source matches 11.11.0.1/24 and destination matches 12.12.0.1 and port matches 443) then permit
- B B. If (source matches 11.11.0.1/24 and destination matches 12.12.0.1 and port matches 80) then permit
- C C. If (source matches 12.12.0.1 and destination matches 11.11.0.1/24 and port matches 443) then permit
- D D. If (source matches 12.12.0.1 and destination matches 11.11.0.1/24 and port matches 80) then permit
Reveal correct answer
Correct answer: A
Explanation
Correct Answer: A. if (source matches 11.11.0.1/24 and destination matches 12.12.0.1 and port matches 443) then permit Explanation: To ensure that employees at HDA can browse the bank only through https service, the correct firewall rule to establish is: If (source matches 11.11.0.1/24 and destination matches 12.12.0.1 and port matches 443) then permit This rule will allow traffic from HDA's IP range (11.11.0.1/24) to access the bank's IP address (12.12.0.1) only through the secure HTTPS protocol (port 443). All other traffic to the bank's IP address will be blocked by this rule, including HTTP traffic (port 80), which is not secure and could put the employees' sensitive banking information at risk.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
