Question
A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?
- A. URL filtering
- B. File blocking
- C. Network security group
- D. Allow list Correct
Explanation
An allow list (implicit deny) permits only explicitly approved traffic and blocks everything else, which is the most restrictive rule set. URL filtering and file blocking target specific categories of content and still let other traffic through. A network security group is a cloud filtering construct that can hold either permissive or restrictive rules, so by itself it does not define strictness.
