You have installed a proxy server that authenticates users. However, you find that one user has bypassed the proxy server by entering the default gateway IP address. How can you solve this problem?
A.
Configure the default gateway to deny access to all systems
B.
Confront the user
1D0-470
C.
Reconfigure the user’s machine
D.
Configure the default gateway to reject all requests to all systems except for the proxy server
Explanation:
By using the default gateway to get to the Internet (or anywhere else) the Proxy server an be bypassed. Usually this should not be the case since the proxy server should be connected directly to the outside network, and nothing else. When a network topology opens up additional paths to the outgoing router, that router port needs to be configured so that only the proxy server can access it.
Incorrect Answers:
A: If we deny all systems, then even the proxy server can’t get out, and this is excessive control that prevents too much.
B: Confronting the user may plug the security hold that occurred (and it might not even be the user’s fault), but action needs to be taken to prevent future breaches by other systems.
C: Same as confronting the user, it does not correct the problem so that it does not occur in the future – even with a different system.