Free PBQ Demo · Intermediate

Firewall Rules Builder

Configure ALLOW/DENY rules with source, destination, port, protocol — exactly the PBQ format Security+ candidates see.

Tests: Network security policy design, ACL ordering, implicit-deny rule placement.

~6 minNo signup needed

Scenario

Configure the firewall to allow only required traffic to the DMZ web server (10.0.1.10) while blocking everything else.

Internet
Firewall
DMZ Web Server (10.0.1.10)
Internal Network (10.0.0.0/24)
Internet → Firewall → DMZInternal → Firewall → DMZ
Firewall Policy — Inbound Rules
#ActionSourceDestinationPortProtocolOrder
1
1 rule configuredRules evaluated top → bottom · First match wins

Firewall rules are processed in order — the first matching rule wins. A final implicit DENY ALL is typically added at the bottom.

Liked this PBQ? There are 80+ more inside.

Sign up free to take full timed exams with mixed MCQs and all 6 PBQ types — across 10 CompTIA and Cisco certifications.