What is the purpose of an access control list (ACL) in firewall configuration?
How are rules in an ACL typically processed?
What elements are typically included in an ACL rule?
A firewall receives a packet and begins checking its access control list (ACL). The third rule matches the packet’s IP address and specifies that the packet should be denied. What will the firewall do next?
A network administrator creates an ACL rule to block outbound traffic from a specific IP address. What part of the rule specifies this?
An ACL rule is written to permit inbound traffic on port 443 for HTTPS. What does this rule control?
ACL Rules:
Rule # | Direction | Criteria | Action |
|---|---|---|---|
1 | Inbound | Source IP: 203.0.113.0/24 | Deny |
2 | Inbound | Destination Port: 22 | Permit |
3 | Any | Any | Deny |
Packet:
Direction: Inbound
Source IP: 203.0.113.12
Destination Port: 22
Question: Will this packet be permitted or denied?
ACL Rules:
Rule # | Direction | Criteria | Action |
|---|---|---|---|
1 | Inbound | Source IP: 10.0.0.5 | Deny |
2 | Inbound | Destination Port: 443 | Permit |
3 | Any | Any | Deny |
Packet:
Direction: Inbound
Source IP: 192.168.1.10
Destination Port: 443
Question: Will this packet be permitted or denied?
What do firewall requirements typically specify?
What criteria can be used in a firewall rule to allow or deny traffic?
A firewall rule is written to allow inbound TCP traffic on port 22 from all IP addresses. What service is this rule likely supporting?
A firewall rule denies inbound TCP traffic on port 80 from the IP range 192.168.1.0 to 192.168.1.255. What is the effect of this rule?
A network administrator wants to block traffic from a specific IP address using a firewall. What should they include in the rule?
Why does the order of firewall rules matter when configuring an access control list (ACL)?
. A firewall has the following two rules:
Rule 1: DENY inbound TCP ALL from ALL
Rule 2: ALLOW inbound TCP port 22 from ALL
What will happen to inbound SSH traffic (port 22)?**
A network administrator wants to allow SSH traffic but block all other inbound TCP traffic. Which rule order will achieve this?