ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 483 - SY0-601 discussion

Report
Export

While troubleshooting a firewall configuration, a technician determines that a 'deny any' policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?

A.
Documenting the new policy in a change request and submitting the request to change management
Answers
A.
Documenting the new policy in a change request and submitting the request to change management
B.
Testing the policy in a non-production environment before enabling the policy in the production network
Answers
B.
Testing the policy in a non-production environment before enabling the policy in the production network
C.
Disabling any intrusion prevention signatures on the 'deny any' policy prior to enabling the new policy
Answers
C.
Disabling any intrusion prevention signatures on the 'deny any' policy prior to enabling the new policy
D.
Including an 'allow any' policy above the 'deny any' policy
Answers
D.
Including an 'allow any' policy above the 'deny any' policy
Suggested answer: B

Explanation:

Testing the policy in a non-production environment before enabling the policy in the production network would prevent the issue of making several company servers unreachable. A non-production environment is a replica of the production network that is used for testing, development, or training purposes. By testing the policy in a non-production environment, the technician can verify the functionality and impact of the policy without affecting the real network or users. This can help to identify and resolve any errors or conflicts before applying the policy to the production network. Testing the policy in a non-production environment can also help to ensure compliance with security standards and best practices.

asked 02/10/2024
Harri rrapaj
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first