StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure Windows Server operating system · Monitoring and troubleshooting · Monitoring and troubleshooting | Troubleshoot Windows Server issues

Practice question 498 of 506 · hard

Two domain-member servers must communicate with authenticated and encrypted IPsec traffic on a specific application port. Connection security rules negotiate successfully, but the application remains blocked by Windows Firewall. What should you check next?

Choose the single best answer.

  1. A.Assume any successful IPsec negotiation automatically creates every required application-port allow rule
  2. B.Apply another connection security rule alone without reviewing the application traffic allow rules
  3. C.Remove the encryption requirement because encryption always prevents Windows Firewall from recognizing ports
  4. D.The effective inbound/outbound firewall traffic rules for the application port and profiles, in addition to the IPsec requirements
Show the answer and explanation

✓ Correct answer

  • The effective inbound/outbound firewall traffic rules for the application port and profiles, in addition to the IPsec requirements

IPsec connection security rules negotiate authentication/encryption, while firewall traffic rules still authorize the application port and profile. Successful negotiation does not open every port. Encryption is not inherently incompatible with filtering, and another connection security rule does not substitute for the required traffic allowance.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.