Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
N10-009 Network Troubleshooting Practice Question
Drag and drop the steps to configure a firewall rule allowing inbound HTTPS traffic to a web server into the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define rule name & description, then specify protocol and port (TCP/443), then specify source and destination addresses, then set action to allow and apply the rule.
The correct sequence for configuring a firewall rule to allow inbound HTTPS traffic is to start with a descriptive rule name, then specify the protocol (TCP) and port (443) to identify the service, then define the source and destination IP addresses, and finally set the action to allow and apply the rule. This order follows logical firewall policy design: identification, service definition, addressing, and enforcement. Common mistakes include placing the protocol/port after addressing or delaying the rule name, which can lead to disorganized or incorrect firewall configurations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Define rule name & description, then specify protocol and port (TCP/443), then specify source and destination addresses, then set action to allow and apply the rule.
Why this is correct
This order ensures that the rule is properly identified, then the core filtering criteria (protocol and port) are defined, followed by addressing, and finally the action. This is the typical workflow in most firewall management interfaces.
- ✗
Specify protocol and port (TCP/443), then define rule name & description, then specify source and destination addresses, then set action to allow and apply the rule.
Why it's wrong here
This sequence, while potentially functional in some firewall management interfaces, deviates from best practices for rule creation and management. Defining the protocol and port before assigning a descriptive name and description can lead to a less intuitive configuration process, making it harder to quickly identify the rule's specific purpose during subsequent audits or troubleshooting. A clear name and description should establish the rule's intent from the outset, providing essential context for all subsequent parameter definitions.
- ✗
Specify source and destination addresses, then specify protocol and port (TCP/443), then define rule name & description, then set action to allow and apply the rule.
Why it's wrong here
Configuring source and destination addresses prior to specifying the protocol and port is an illogical and inefficient approach to firewall rule definition. Without first identifying the specific service or application traffic (e.g., TCP/443 for HTTPS), the relevance of the IP addresses is unclear, increasing the likelihood of creating overly broad or incorrectly scoped rules. This can lead to security vulnerabilities or unintended traffic blocking, as the fundamental nature of the traffic is not established early in the process.
- ✗
Define rule name & description, then specify source and destination addresses, then specify protocol and port (TCP/443), then set action to allow and apply the rule.
Why it's wrong here
Although the rule name is defined first, specifying addresses before protocol/port is out of order. The protocol and port define the service, which should be set before addressing to ensure the rule filters traffic correctly.
Go deeper
Related to this question
Learn chapter
Troubleshoot: Security and Policy
Key term
HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP that encrypts data between a web browser and a web server using SSL/TLS protocols.
Key term
TCP
TCP (Transmission Control Protocol) is a core internet protocol that ensures data is sent reliably and in order between devices over a network.
About these practice questions
One of 464 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.