Applying first-match firewall rules
A fictional firewall evaluates rules from top to bottom and applies the first match. It has this policy:
| Order | Source | Destination | Service | Action |
|---|---|---|---|---|
| 1 | Guest network | Internal payroll server | Any | Deny |
| 2 | Any | Internal payroll server | TCP 443 | Allow |
| 3 | Any | Any | Any | Deny |
What happens to a new TCP 443 connection from a guest device to the payroll server?
A
It is allowed because TCP 443 always bypasses firewall rules.
B
It matches no rule because rule 1 says Any for service.
C
It is denied by rule 1.
D
It is allowed by rule 2 because a later allow always overrides an earlier deny.
Question Leaderboard
Not enough data yet to show leaderboard.