Certified Incident Handler (ECIH) — Question 40

A pfSense firewall has been configured to block a web application www.abchacker.com. Perform an analysis on the rules set by the admin and select the protocol which has been used to apply the rule.
Hint: Firewall login credentials are given below:

Username: admin -
Password: admin@l23

Answer options

• A. POP3
• B. TCP/UDP
• C. FTP
• D. ARP

Correct answer: B

Explanation

The correct answer is B, TCP/UDP, as these are the protocols typically used for web traffic, including HTTP and HTTPS, which are relevant for blocking web applications. The other options, such as POP3, FTP, and ARP, do not pertain to web application traffic, making them unsuitable in this context.