hardMultiple ChoiceObjective-mapped
FC0-U71 Practice Question: A small business uses a single external IP…
A small business uses a single external IP address from their ISP and has a network of 10 computers. They want to host a web server that must be accessible from the internet, but they also need to protect their internal network. They have a firewall/router that supports port forwarding. Which configuration should they implement?
⚠ Common exam trap
Watch out — candidates often confuse the DMZ option (B) as a secure solution, not realizing that a typical SOHO DMZ exposes the host to all inbound traffic, which is far less secure than targeted port forwarding.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure port forwarding on the router to direct HTTP (port 80) and HTTPS (port 443) traffic to the web server's internal IP address
Port forwarding allows the firewall/router to accept incoming HTTP (port 80) and HTTPS (port 443) traffic on the single public IP address and forward it to the web server's internal private IP address. This exposes only the necessary ports to the internet while keeping the web server behind the firewall, protecting the internal network from direct external access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Connect the web server directly to the ISP modem, bypassing the firewall
Why it's wrong here
Bypassing the firewall removes protection for the server and the internal network.
- ✗
Place the web server in the DMZ of the firewall and allow all inbound traffic to the server's IP
Why it's wrong here
DMZ exposes the server to more traffic and potential attacks; port forwarding is more secure.
- ✗
Assign a public IP address to the web server and connect it to the same switch as the other computers
Why it's wrong here
This exposes the server directly and unnecessarily uses additional public IPs.
- ✓
Configure port forwarding on the router to direct HTTP (port 80) and HTTPS (port 443) traffic to the web server's internal IP address
Why this is correct
This allows external access only to the specified ports while protecting the internal network.
Go deeper
Related to this question
About these practice questions
One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.