CISSP Questions #2: ACL's should be complex. This is not a firewall best practice because ACL's or Access Control Lists should be simple.

Question

ACL's should be complex. This is not a firewall best practice because ACL's or Access Control Lists should be simple.

John Intindolo · Accepted Answer

Which of the following is NOT a firewall best practice?
- Use implicit deny
- ACL's should be complex
- Perform ingress and egress filtering
- Block unnecessary ICMP packets
- ACL's should be simple

CISSP Questions #2

ACL's should be complex. This is not a firewall best practice because ACL's or Access Control Lists should be simple.

Which of the following is NOT a firewall best practice? - Use implicit deny - ACL's should be complex - Perform ingress and egress filtering - Block unnecessary ICMP packets - ACL's should be simple

Author