試験SY0-601-JPN トピック4 問題367 スレッド
CompTIA SY0-601-JPNのリアル試験問題集
問題 #: 367
トピック #: 4
問題 #: 367
トピック #: 4
技術者は、ネットワークを強化しながらインターネットへの Web トラフィックを許可するために、ネットワーク セグメントに新しいファイアウォールを設定しています。ファイアウォールが構成された後、ユーザーは Web サイトが見つからなかったことを示すエラーを受け取ります。問題を最もよく解決するのは次のうちどれですか?
おすすめの解答：D 解答を投票する
Port 53 is the default port for DNS traffic. If the firewall is blocking port 53, then users will not be able to resolve domain names and will receive errors stating that the website could not be located.
The other options would not correct the issue. Setting an explicit deny to all traffic using port 80 instead of 443 would block all HTTP traffic, not just web traffic. Moving the implicit deny from the bottom of the rule set to the top would make the deny rule more restrictive, which would not solve the issue. Configuring the first line in the rule set to allow all traffic would allow all traffic, including malicious traffic, which is not a good security practice.
Therefore, the best way to correct the issue is to ensure that port 53 has been explicitly allowed in the rule set.
Here are some additional information about DNS traffic:
DNS traffic is used to resolve domain names to IP addresses.
DNS traffic is typically unencrypted, which makes it vulnerable to eavesdropping.
There are a number of ways to secure DNS traffic, such as using DNS over HTTPS (DoH) or DNS over TLS (DoT).
The other options would not correct the issue. Setting an explicit deny to all traffic using port 80 instead of 443 would block all HTTP traffic, not just web traffic. Moving the implicit deny from the bottom of the rule set to the top would make the deny rule more restrictive, which would not solve the issue. Configuring the first line in the rule set to allow all traffic would allow all traffic, including malicious traffic, which is not a good security practice.
Therefore, the best way to correct the issue is to ensure that port 53 has been explicitly allowed in the rule set.
Here are some additional information about DNS traffic:
DNS traffic is used to resolve domain names to IP addresses.
DNS traffic is typically unencrypted, which makes it vulnerable to eavesdropping.
There are a number of ways to secure DNS traffic, such as using DNS over HTTPS (DoH) or DNS over TLS (DoT).
Kawai 2026-03-20 03:37:52
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。