ExamGecko
Question list
Search
Search

List of questions

Search

Question 2 - PCCSE discussion

Report
Export

A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.

Which port should the team specify in the CNAF rule to protect the application?

A.
443
Answers
A.
443
B.
80
Answers
B.
80
C.
8080
Answers
C.
8080
D.
8888
Answers
D.
8888
Suggested answer: C

Explanation:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/19-11/prisma-cloud-compute-edition-admin/firewalls/deploy_cnaf

When configuring Cloud Native Application Firewall (CNAF) rules, the specified port should be the one where the container itself listens for web traffic. In this scenario, since the NGINX container is listening on port 8080, the CNAF rule should be configured to protect traffic on port 8080. This ensures that the firewall rule is applied to the traffic intended for the container, regardless of the port mapping on the host.

The documentation from Palo Alto Networks provides guidance on deploying CNAF and specifies that the port in the firewall rule should match the container's listening port, not the host's mapped port. This is an important distinction for properly securing containerized applications with CNAF.

asked 23/09/2024
Ioana Mihaila
21 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first