A security administrator is configuring Windows Firewall with Advanced Security for a web server. The requirement is to allow inbound HTTPS traffic but block all other inbound traffic. Which of the following rule configurations best meets this requirement?
Trap 1: Create an inbound block rule for all ports and then exclude HTTPS
Creating an inbound block rule for all ports and then excluding HTTPS is not a valid configuration in Windows Firewall; you cannot 'exclude' from a block rule. Instead, you must create separate allow rules. This approach is overly complex and not recommended.
Trap 2: Create an inbound allow rule for HTTPS and set the firewall default…
Setting the firewall default action to block and creating an allow rule for HTTPS would work, but it is not the most explicit method. The default inbound action in Windows Firewall is already block unless an allow rule exists. This option is less precise than creating a dedicated block rule for all other ports, as specified in option D.
Trap 3: Create an outbound allow rule for HTTPS only
This rule is for outbound traffic, but the requirement is to allow inbound HTTPS traffic. Outbound rules do not control inbound traffic, so this configuration fails to meet the requirement.
- A
Create an inbound block rule for all ports and then exclude HTTPS
Why wrong: Creating an inbound block rule for all ports and then excluding HTTPS is not a valid configuration in Windows Firewall; you cannot 'exclude' from a block rule. Instead, you must create separate allow rules. This approach is overly complex and not recommended.
- B
Create an inbound allow rule for HTTPS and set the firewall default action to block
Why wrong: Setting the firewall default action to block and creating an allow rule for HTTPS would work, but it is not the most explicit method. The default inbound action in Windows Firewall is already block unless an allow rule exists. This option is less precise than creating a dedicated block rule for all other ports, as specified in option D.
- C
Create an outbound allow rule for HTTPS only
Why wrong: This rule is for outbound traffic, but the requirement is to allow inbound HTTPS traffic. Outbound rules do not control inbound traffic, so this configuration fails to meet the requirement.
- D
Create an inbound allow rule for HTTPS and create a block rule for all other ports
This configuration explicitly allows inbound HTTPS traffic via a specific allow rule and blocks all other inbound traffic by creating a block rule for all ports. This is the most direct and secure method, enforcing the principle of least privilege.