CV0-004日本語 無料問題集「CompTIA Cloud+ (2024) (CV0-004日本語版)」
ある会社では、ビジネス用途のさまざまなコンテナ化されたアプリケーションをホストしています。クライアントから、日常的なビジネス アプリケーションの 1 つが、会社のクラウドでホストされている Web ベースのログイン プロンプトの読み込みに失敗するという報告がありました。
各デバイスとリソースをクリックします。アーキテクチャ内の各ノードの構成、ログ、特性を確認して問題を診断します。次に、WAF 構成に必要な変更を加えて問題を修正します。
各デバイスとリソースをクリックします。アーキテクチャ内の各ノードの構成、ログ、特性を確認して問題を診断します。次に、WAF 構成に必要な変更を加えて問題を修正します。
正解：
See the Explanation below for solution
Explanation:
From the image, it's noticeable that some finance application rules are set to "Block" traffic. If the client's issue is with a finance-related application not loading the login prompt, these rules could be the cause.
The rule with ID 1005, labeled "Finance application 1", is configured to allow access to "webapp1" for finance-related paths. However, rule 1006, labeled "Finance application 2", is set to block access to "webapp1" for login-related paths.
To remediate the issue based on the WAF configuration you have provided, you would want to:
Ensure that the correct paths to the finance application are allowed through the WAF.
Modify any rules that are incorrectly blocking access to the application.
If the client's problem is specifically with the login prompt, then rule 1006 seems the most likely culprit. Changing the action from "Block" to "Allow" for rule 1006 could potentially resolve the client's issue. The rule should be carefully reviewed and updated to ensure legitimate traffic is not being blocked while still protecting against unauthorized access.
Explanation:
From the image, it's noticeable that some finance application rules are set to "Block" traffic. If the client's issue is with a finance-related application not loading the login prompt, these rules could be the cause.
The rule with ID 1005, labeled "Finance application 1", is configured to allow access to "webapp1" for finance-related paths. However, rule 1006, labeled "Finance application 2", is set to block access to "webapp1" for login-related paths.
To remediate the issue based on the WAF configuration you have provided, you would want to:
Ensure that the correct paths to the finance application are allowed through the WAF.
Modify any rules that are incorrectly blocking access to the application.
If the client's problem is specifically with the login prompt, then rule 1006 seems the most likely culprit. Changing the action from "Block" to "Allow" for rule 1006 could potentially resolve the client's issue. The rule should be carefully reviewed and updated to ensure legitimate traffic is not being blocked while still protecting against unauthorized access.