NSE 5 – Network Security Analyst — Question 6

You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

Answer options

• A. 192.168.2.0 / 255.255.255.0
• B. 192.168.2.2 / 255.255.255.0
• C. 192.168.2.0 / 255.255.255.255
• D. 192.168.2.2 / 255.255.255.255

Correct answer: D

Explanation

The correct choice is D because it specifies the exact IP address of the web server with a subnet mask of 255.255.255.255, which targets only that specific host. The other options either define a subnet address or have incorrect subnet masks that do not restrict traffic to just the web server's IP.