An administrator needs to implement a policy where traffic from the 'Sales' zone to the 'Finance' zone is allowed only for the 'ms-office365' application, but traffic from 'Sales' to 'Finance' using any other application must be denied. Which rule design meets this requirement efficiently?
Trap 1: Create a rule that denies all traffic from Sales to Finance, and…
Application default deny is not a rule; it's a setting that requires explicit allow rules.
Trap 2: Create a rule that allows all traffic from Sales to Finance, then a…
This would allow all applications except ms-office365, opposite of requirement.
Trap 3: Create one rule that allows ms-office365 and denies all other…
A single rule cannot both allow and deny; it performs one action per match.
- A
Create a rule that denies all traffic from Sales to Finance, and then an application default deny rule that allows ms-office365.
Why wrong: Application default deny is not a rule; it's a setting that requires explicit allow rules.
- B
Create a rule that allows all traffic from Sales to Finance, then a rule that denies ms-office365.
Why wrong: This would allow all applications except ms-office365, opposite of requirement.
- C
Create a rule that allows ms-office365 from Sales to Finance, and place a deny all rule after it.
The first rule allows the specific application, and the second deny rule blocks all other traffic.
- D
Create one rule that allows ms-office365 and denies all other traffic from Sales to Finance.
Why wrong: A single rule cannot both allow and deny; it performs one action per match.