A network technician is troubleshooting a newly deployed web server configured with IP add… — CompTIA Network+

A network technician is troubleshooting a newly deployed web server configured with IP address $10.50.12.35/27$ . The server can ping another host on the local subnet at $10.50.12.34$ , but it cannot reach external networks or receive HTTPS requests from internet clients.

Reviewing the device settings reveals:
- Router LAN Interface IP: $10.50.12.33/27$
- Server Default Gateway: $10.50.12.1$
- Router WAN Interface Inbound ACL:
- `permit tcp any host 10.50.12.35 eq 80`
- `deny ip any any`

Which TWO of the following troubleshooting actions are required to restore full intended connectivity for the server?

Update the server's default gateway address to $10.50.12.33$ .Answer
Add a rule to the router WAN inbound ACL permitting TCP port 443 traffic to $10.50.12.35$ .Answer
C
Change the server subnet mask to $255.255.255.0$ to include $10.50.12.1$ within the local subnet.
D
Reassign the server interface to the native VLAN to bypass Layer 3 routing for external destinations.

Answer

The server's default gateway address must be changed to

10.50.12.33

, and an inbound ACL rule permitting TCP port 443 to host

10.50.12.35

must be added to the router's WAN interface.

The host resides on the

10.50.12.32/27

subnet. The gateway IP

10.50.12.1

is outside this subnet, preventing remote network access until updated to the router interface address

10.50.12.33

. Additionally, incoming HTTPS traffic uses TCP port 443, which is blocked by the WAN ACL's implicit deny until an explicit permit rule for TCP port 443 is inserted.

Step-by-Step Solution

Analyze the subnet boundaries for the server's IP configuration.

For

10.50.12.35/27

, the network ID is

10.50.12.32

, the broadcast address is

10.50.12.63

, and usable host IP addresses range from

10.50.12.33

10.50.12.62

Determines whether the gateway address assigned to the server resides on the same local subnet.

Identify the routing error causing external host unreachability.

The configured gateway

10.50.12.1

is on a different subnet (

10.50.12.0/27

), making it unreachable as a Layer 3 next hop. Updating the default gateway to

10.50.12.33

resolves outbound routing.

A host must have a valid default gateway on its local subnet to send packets outside its local segment.

Evaluate the WAN interface inbound ACL for HTTPS traffic.

The ACL permits port 80 (HTTP) but lacks a permit rule for port 443 (HTTPS). Due to the implicit deny rule (`deny ip any any`), incoming HTTPS packets are dropped.

An explicit ACL permit rule for TCP port 443 is necessary to allow inbound HTTPS traffic.

Key Concept

Subnet Default Gateway Alignment & Access Control List Port Filtering

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic