CompTIA Tech+ (FC0-U71)Applications and SoftwareHard
A technician is installing a new enterprise resource planning (ERP) application for a client. This application requires specific network ports to be open for communication between the client workstations and the central server. The client's firewall is currently blocking these ports, preventing the application from functioning correctly. Which of the following firewall configuration actions is MOST appropriate to resolve this issue while maintaining security?
- ACreate an inbound rule to allow traffic on the required ports to the application server.
- BInstall a second firewall on the server.
- COpen all incoming and outgoing ports.
- DTemporarily disable the entire firewall.
Show answer & explanationAnswer & explanation
Correct answer: A. Create an inbound rule to allow traffic on the required ports to the application server.
To allow specific application traffic while maintaining security, the most appropriate action is to create a targeted inbound firewall rule. This rule should specify the exact ports and, if possible, the specific IP addresses or applications that are allowed to communicate, thereby minimizing the attack surface.
Why the other options are wrong
- B. Installing a second firewall is unnecessary and could complicate network management without solving the port blocking issue directly.
- C. Opening all ports creates a massive security vulnerability, allowing any traffic to pass, which is highly insecure.
- D. Disabling the entire firewall is a significant security risk and should never be a long-term solution.
Firewall Rules
Instructions that dictate which network traffic is allowed or denied based on criteria such as source/destination IP, port number, and protocol.
- Define network security policies.
- Can be inbound (traffic entering) or outbound (traffic leaving).
- Specific rules are prioritized and processed sequentially.
- Principle of least privilege applies: only allow what is necessary.
Memory trick: Firewall rules are like a bouncer at a club: only specific, approved guests get in.