Exam Network-Security-Essentials Topic 1 Question 30 Discussion

Actual exam question for WatchGuard's Network-Security-Essentials exam
Question #: 30
Topic #: 1

You recently installed network monitoring software on your server and then performed a port scan for each IP address in the network. When the scan finishes, you notice that the server lost access to the Internet. What is the most likely cause of this issue? (Select one.)

A. The server IP address was added to the Blocked Sites list because of the default packet handling port scan rule B. The policy that handles outbound traffic was automatically disabled because the Firebox was port scanned C. The port scan traffic matched a default HTTP proxy content type rule configured with a Block action D. The server IP address was added to the Blocked Sites list because the network was flooded with ESP traffic during the port scan E. The server IP address was added to the Blocked Sites list because an IPS signature was matchedduring the port scan

Suggested Answer: A Vote an answer

When a port scan is detected, Firebox devices with default settings often include a rule to add the source IP address of the scan to the Blocked Sites list to prevent potential threats. This is a standard security measure in Firebox configurations, aimed at mitigating the risk of network scanning attempts. Consequently, if the server you used to perform the port scan was added to the Blocked Sites list, it would lose Internet access as the device blocks any outgoing connections from that IP. This behavior aligns with Firebox's handling of port scan detection through default security rules.

by Hugo at Mar 01, 2025, 09:49 AM

Limited Time Offer

15%

Off

Get Premium Network-Security-Essentials Questions as Interactive Self Test Engine or PDF

Comments

0 Satisfied Customers

0 Shares

0 Demo Downloads

10 Years in Business