Question

A network security engineer is tasked with blocking all external connection attempt from the internet to the /admin directory in a web application that uses TLSv1.2, but must continue to allow access to the rest of the site. Which of the following controls should the engineer apply to fulfill the requirement?

A Add an IPS signature to block any session requesting resources from /admin

B Add a rule in the /admin web server directory to deny from all.

C Add a disallow: /admin entry to the robots.txt file in the web server

D Add a firewall rule for port 443 to allow connections from non RFC-1918 addresses.

Answer 1

--> Since we want to block the connection we can use intrusion prevention system.

option A) Add an IPS signature to block any session requesting resources from /admin.