For the HTTP firewall rule allowing WAN to the DMZ web server, what is the destination address?

For the HTTP firewall rule allowing WAN to the DMZ web server, what is the destination address?

• A. 10.0.0.5
• B. 172.16.1.5
• C. 172.16.1.1
• D. 192.168.1.5

Answer: (B)

In a firewall rule, the destination address is the final target that the traffic is allowed to reach. For traffic coming from the WAN and intended for a web server in the DMZ, the destination should be the web server’s IP on the DMZ network. Here, the DMZ web server is at 172.16.1.5, so that is the destination address the rule must specify. The other addresses tend to be either the DMZ gateway/interface (often 172.16.1.1) or devices on different networks; they are not the final host the WAN traffic is meant to reach. So 172.16.1.5 best identifies the actual web server receiving the HTTP requests.

In a firewall rule, the destination address is the final target that the traffic is allowed to reach. For traffic coming from the WAN and intended for a web server in the DMZ, the destination should be the web server’s IP on the DMZ network. Here, the DMZ web server is at 172.16.1.5, so that is the destination address the rule must specify.

The other addresses tend to be either the DMZ gateway/interface (often 172.16.1.1) or devices on different networks; they are not the final host the WAN traffic is meant to reach. So 172.16.1.5 best identifies the actual web server receiving the HTTP requests.