ISACA Exam Questions

An information security manager reviewing firewall rules will be MOST concerned if the firewall allo

An information security manager reviewing firewall rules will be MOST concerned if the firewall
allows:

A.
source routing.

B.
broadcast propagation.

C.
unregistered ports.

D.
nonstandard protocols.

Explanation:

If the firewall allows source routing, any outsider can carry out spoofing attacks by stealing the
internal (private) IP addresses of the organization. Broadcast propagation, unregistered ports and
nonstandard protocols do not create a significant security exposure.