Configuring Firewall: Blocking External DNS Traffic | SY0-601 Exam | CompTIA Security+

Blocking External DNS Traffic: Firewall Configuration

Prev Question Next Question

Question

A technician must configure a firewall to block external DNS traffic from entering a network.

Which of the following ports should they block on the firewall?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

The correct answer is A. 53.

DNS (Domain Name System) is a protocol used to translate human-readable domain names, such as www.example.com, into IP addresses that computers can understand. DNS traffic usually uses UDP (User Datagram Protocol) port 53 or TCP (Transmission Control Protocol) port 53.

In this scenario, the technician wants to block external DNS traffic from entering the network. This means that any DNS queries from outside the network should be blocked by the firewall.

Therefore, the technician should configure the firewall to block traffic on port 53, which is the default port used by DNS. By blocking this port, the firewall will prevent external DNS traffic from entering the network.

Option B (110) is the default port used by the POP3 (Post Office Protocol version 3) email protocol. Option C (143) is the default port used by the IMAP (Internet Message Access Protocol) email protocol. Option D (443) is the default port used by the HTTPS (HTTP Secure) protocol.

None of these ports are used by DNS traffic, so they should not be blocked in this scenario.