In a distributed management environment, the firewall administrator has removed the default
check from Accept VPN-1/Firewall-1 control connections under the Security Policy tab of the
properties setup dialogue box. In order for the management module and the Firewall to
communicate, you must create a rule to allow the Management Module to communicate to the
firewall on which port?

A.
80

B.
256

C.
259

D.
900

E.
23

Explanation:
the port 256 is used by the management station to push the policies to the enforcement modules,
therefore it provides communication between the firewall and the management module. See the
official CCSA courseware. Appendix C.4.
Incorrect Answers:
A: The communication does not take place through the standard HTTP port.
C: This port is used for client authentication through Telnet.
D: This port is used for client authentication trough HTTP.
E: This is the default port for Telnet.