PERFORMANCE-BASED QUESTION

Firewall Ruleset Configuration

Veridian Financial operates a perimeter firewall protecting three network zones. You are the security engineer responsible for defining the ordered ACL that enforces the company's security requirements. Configure all 7 rules in the correct order and with correct values — order matters.

SY0-701 Domain 4.5 | Firewall Policy / Least Privilege | 7 Rules to Configure
ACL Workspace

Configure each rule using the dropdowns. Rules are evaluated in order (1 first). Select the correct Action, Source Zone, Destination Zone, Service/Port, and Protocol.

Order conflict detected: Your broad deny-all rule (Any to Any) is not in position 7 — it will block rules below it before they can be evaluated. Move it to the last position.
# Action Source Zone Destination Zone Service / Port Protocol

Check Configuration

All 7 rules must be correct to pass. If any rule is wrong you will see a specific explanation — fix and re-check.

0/7
rules configured correctly
Configuration Verified — All 7 Rules Correct

Your ACL correctly implements least privilege, explicit deny, DMZ isolation, and an implicit-deny catch-all. Veridian Financial's perimeter is properly hardened.