Tech QOTD – Topic: ACLs (Security+)


Answer the multiple choice question below. (Click the image to enlarge.)


(see answer below and video response)

This is just one of hundreds of questions and answers included with my Security+ Cert Guide.



The best answers are B. Add the following ACL to the bottom of the current ACL – Deny IP ANY ANY 53; and F. Change the firewall default settings so that it implements an implicit deny. Also, the implicit allow should be removed from the firewall. Most firewalls are configured in the manner of an implicit deny by default. Watch your syntax as well. For example, if you were using a Cisco device, a TCP or UDP deny might require “eg” before the port number. Also, the placement of the ACLs is important.

See the video solution for more.

Video Solution:

Answer at 1:45.

Do you enjoy learning by watching? Then check out the CompTIA Security+ (SY0-401) Complete Video Course by fellow instructor Michael J Shannon.