CompTIA Security+ (SY0-501) — Question 39

A new firewall has been places into service at an organization. However, a configuration has not been entered on the firewall. Employees on the network segment covered by the new firewall report they are unable to access the network. Which of the following steps should be completed to BEST resolve the issue?

Answer options

• A. The firewall should be configured to prevent user traffic form matching the implicit deny rule.
• B. The firewall should be configured with access lists to allow inbound and outbound traffic.
• C. The firewall should be configured with port security to allow traffic.
• D. The firewall should be configured to include an explicit deny rule.

Correct answer: A

Explanation

The correct answer is A because an unconfigured firewall will typically block all traffic by default due to the implicit deny rule. Configuring the firewall to prevent user traffic from matching this rule allows necessary traffic to pass. The other options do not address the immediate need to allow traffic through the firewall effectively.