Your network contains an Active Directory domain named contoso.com. The domain
contains an application server named Server1.Server1 runs Windows Server 2012 R2.
Server1 is configured as an FTP server.
Client computers use an FTP application named App1.exE. App1.exe uses TCP port 21 as
the control port and dynamically requests a data port.
On Server1, you create a firewall rule to allow connections on TCP port 21.
You need to configure Server1 to support the client connections from App1.exE.
What should you do?
A.
Run netshadvfirewall set global statefulftp enable.
B.
Run netsh firewall addportopening TCP 21 dynamicftp.
C.
Create an inbound firewall rule to allow App1.exE.
D.
Create an isolation connection security rule.
Explanation:
The Netshadvfirewall set global statefulftp command will configure how Windows Firewall
with Advanced Security handles FTP traffic that uses an initial connection on one port to
request a data connection on a different port.
When statefulftp is enabled (Disabled being the default setting) the firewall tracks the port
numbers specified in PORT command requests and in the responses to PASV requests, and
then allows the incoming FTP data traffic entering on the requested port number.
The Netshadvfirewall set global statefulftp command will configure how Windows Firewall with Advanced Security handles FTP traffic that uses an initial connection on one port to request a data connection on a different port.
When statefulftp is enabled (Disabled being the default setting) the firewall tracks the port numbers specified in PORT command requests and in the responses to PASV requests, and then allows the incoming FTP data traffic entering on the requested port number.
0
0
C.
Create an inbound firewall rule to allow App1.exE.
0
0
A is correct only…
Refer the below link: @Volkan – it is nothing but setting up the inbound rule only, but it is for the port, we cannot set/allow App1.exe directly
https://technet.microsoft.com/en-in/library/cc771920(v=ws.10).aspx
0
0
https://technet.microsoft.com/en-us/library/Dd421710%28v=WS.10%29.aspx#bkmk_2
0
0
netsh advfirewall set global StatefulFTP “disable”
0
0