SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ725

Network and Communications Security

Which of the following rules in an Internet firewall policy is inappropriate?

  • A Source routing shall be disabled on all firewalls and external routers.
  • B Firewalls shall be configured to transparently allow all outbound and inbound services.
  • C Firewalls should fail to a configuration that denies all services, and require a firewall administrator to re-enable services after a firewall has failed.
  • D Firewalls shall not accept traffic on its external interfaces that appear to be coming from internal network addresses.
Explanation

A firewall policy should deny traffic unless it is expressly authorized; transparently allowing all inbound and outbound services permits unnecessary traffic and removes the protection the firewall is intended to provide.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!