Client Authentication rules should be placed above the Stealth rule, so users can authenticate to
the firewall.

A.
True

B.
False

Explanation:
you should always place any client authentication rule above the stealth rule, the stealth rule will
prevent any connection to the firewall for security purposes, the client authentication needs to
make a telnet connection on port 259 TCP or an HTTP connection in port 900 TCP. So, you
should always place your client authentication rules above the stealth rule or you will have your
traffic dropped.
Incorrect Answers:
B: The statement at the question is true, we need the stealth rule below the client authentication
rule, if we don’t do it this way, our authentication request will be logged or dropped depending on
our Stealth rule.