Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
mediumDrag & DropObjective-mapped
CAS-004 Practice Question: Drag and drop the steps to configure a host-based…
Drag and drop the steps to configure a host-based firewall (Windows Defender Firewall) to block all inbound traffic except RDP into the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Open Windows Defender Firewall with Advanced Security console, create an inbound rule to allow RDP, enable the rule, set default inbound action to block, test the configuration.
Firewall configuration: open console, create allow rule for RDP, ensure it's enabled, then set default block, and test.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Open Windows Defender Firewall with Advanced Security console, create an inbound rule to allow RDP, enable the rule, set default inbound action to block, test the configuration.
Why this is correct
This order ensures the allow rule is created and enabled before changing the default to block, preventing accidental lockout. Testing verifies the configuration works.
- ✗
Open the console, create an inbound rule to allow RDP, set default inbound action to block, enable the rule, test.
Why it's wrong here
Enabling the rule after setting the default block may cause the rule to be applied correctly, but it is best practice to enable the rule before blocking to avoid any temporary issues.
- ✗
Open the console, set default inbound action to block, create an inbound rule to allow RDP, enable the rule, test.
Why it's wrong here
Setting the default block before creating the allow rule might block existing RDP connections if the rule is not immediately applied. It's safer to create and enable the rule first.
- ✗
Set default inbound action to block, open the console, create an inbound rule to allow RDP, enable the rule, test.
Why it's wrong here
You cannot set the default block without first opening the console. This order is impractical and will fail.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.