GIAC Exam GSNA Topic 2 Question 69 Discussion

Actual exam question for GIAC's GSNA exam

Question #: 69
Topic #: 2

[All GSNA Questions]

You work as a Network Administrator for Techpearl Inc. You are configuring the rules for the firewall of the company. You need to allow internal users to access secure external websites. Which of the following firewall rules will you use to accomplish the task?

ATCP 172.16.1.0/24 any any 80 HTTP permit

BTCP 172.16.1.0/24 any any 25 SMTP permit

CTCP 172.16.1.0/24 any any 80 HTTP deny

DTCP 172.16.1.0/24 any any 443 HTTPs permit

Show Suggested Answer

Suggested Answer: D

The TCP 172.16.1.0/24 any any 443 HTTPs permit rule is used to allow internal users to access secure external websites.

Answer A is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP permit rule is used to allow internal users to access external

websites (secure & unsecure both).

Answer C is incorrect. The TCP 172.16.1.0/24 any any 80 HTTP deny rule is used to deny internal users to access external websites.

Answer B is incorrect. The TCP 172.16.1.0/24 any any 25 SMTP permit rule is used to allow internal mail servers to deliver mails to

external mail servers.

by Tracey at Apr 07, 2025, 02:53 AM

Limited Time Offer

25%

Off

Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Janine

24 days ago

Option C is just denying all HTTP traffic, which isn't what we want. Gotta go with D to permit the HTTPS connections.

upvoted 0 times

...

Carol

25 days ago

Haha, option B for SMTP? That's a funny one. I don't think we're trying to send emails through the firewall here.

upvoted 0 times

Charlette

6 days ago

A) TCP 172.16.1.0/24 any any 80 HTTP permit

upvoted 0 times

...

2 months ago

Hmm, I think option D is the correct choice here. Allowing access to secure external websites using HTTPS on port 443 seems like the appropriate firewall rule.

upvoted 0 times