Business Analysis Frameworks →mediumMultiple ChoiceObjective-mapped

CAPM Firewall Rule Practice Question

Exhibit

{
  "SecurityGroup": {
    "GroupName": "web-sg",
    "IpPermissions": [
      {
        "IpProtocol": "tcp",
        "FromPort": 80,
        "ToPort": 80,
        "IpRanges": [{"CidrIp": "0.0.0.0/0"}]
      },
      {
        "IpProtocol": "tcp",
        "FromPort": 443,
        "ToPort": 443,
        "IpRanges": [{"CidrIp": "0.0.0.0/0"}]
      },
      {
        "IpProtocol": "tcp",
        "FromPort": 22,
        "ToPort": 22,
        "IpRanges": [{"CidrIp": "10.0.0.0/8"}]
      }
    ]
  }
}

Refer to the exhibit. A BA is analyzing this network firewall rule set for a web application. Which statement is true about the configuration?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

All ports are open to the local network.

The firewall rule set permits all ports from the local network (e.g., 10.0.0.0/8), meaning all traffic originating from the local network is allowed. Option B is incorrect because the rule set only includes defined inbound rules, not all communication channels. Option C is irrelevant to firewall configuration. Option D is incorrect because SSH (port 22) is restricted to the local network, not the entire internet.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
All ports are open to the local network.
Why this is correct
Correct: The firewall allows all ports from the local network, as indicated by the rule allowing all traffic from the private IP range.
✗
The matrix includes all communication channels.
Why it's wrong here
Incorrect: The rule set only specifies a few inbound rules, not all possible communication channels.
✗
The project sponsor and the project manager receive status reports from all team members.
Why it's wrong here
Incorrect: This statement is about project communication, not firewall rules.
✗
SSH access is allowed from the entire internet.
Why it's wrong here
Incorrect: SSH is only allowed from the local network (e.g., 10.0.0.0/8), not from the entire internet.

Visual reference

Go deeper

CAPM Firewall Rule Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question