Exam MD-100 topic 3 question 12 discussion

Correct answer is B. The inbound rule will have no effect on the pings from the user's computer, but an outbound rule set to block will stop the ping leaving. I've just tested this.

Answer is D. The server can respond to other computers but not the users computer which suggests a setting needs to be changed on the users computer. The server does not reply does not mean that it did not receive it. The reply just was not registered by the users computer. Hence the incoming rule.

At first I thought the answer was D, but after digging a bit deeper and going to this page: https://kb.iu.edu/d/aopy it definitely seems like B. ECHO Requests In is to allow other machines to be able to ping you, it is turned off to prevent certain attacks like DDoS. ECHO Request Out allow you to send those ping requests out.

For me is D. I think if it was B it would not have context to the specification in the question that the server responds to other clients.

IN rule affects ping

The correct answer is D. File and Printer Sharing (Echo Request ICMPv6-In). The issue may be caused by a Windows Defender firewall rule that is blocking the ping request from the user's computer to the server. The fact that the ping request works from your computer indicates that the server is properly configured to respond to ping requests. The File and Printer Sharing (Echo Request ICMPv6-In) rule is responsible for allowing incoming ICMPv6 traffic, which includes ping requests, from the network to the computer. If this rule is not enabled on the user's computer, it may be blocking the ping request to the server. By enabling the File and Printer Sharing (Echo Request ICMPv6-In) rule, you allow the user's computer to receive incoming ping requests which should resolve the issue.

The possible cause of the issue is option B: "File and Printer Sharing (Echo Request ICMPv6-Out)". chatgpt

D is correct

B (tested). Bear in mind you are pinging the server from the computer in the question and not getting a reply. That does not mean the server is getting the initial ping and the reply is being blocked by the sending computer. I tried each of the below, resetting firewall rules between each change. Standard behavior (no outbound or inbound rules enabled, no inbound ICMP rule enabled): you can ping out and get a reply, you can't ping in from another computer to that one. Enabling outbound allowing ICMP: does nothing, same effect as default behavior Enabling inbound allowing ICMP: allows another computer to ping this one Enable inbound rule blocking ICMP: blocks only inbound pings, outbound still go out and get replies Changing Outbound rule to blocking ICMP: General failure message. Ping fails. So it's B, if you're just looking at the computer sending pings. Specifically, outbound ICMP has been blocked. Disabling that rule should allow the pings again, putting it back to default behavior.

I have tested between two Windows 10 client VM's and again with Windows Server 2012 and a Windows 10 client ONLY THE INBOUND RULE AFFECTS PING REQUESTS when both computers are on the same network!!!!! I'm not yet sure when Outbound comes into play but I'm assuming between different networks. However the question is misleading the change is needed by the SERVER not the CLIENT. In my testing allowing incoming requests by the firewall allows to other computer to request ping. In this case the client can not ping the server so a change or addition in the inbound rule by the server is required. Again this information based on my test with two Win 10 IPv4 firewall rules.

I don't understand why it says "Echo Request In". Shouldn't it be "Echo Reply In"?

windows firewall by default dont block 'out', but block 'in'... Now i understand why 'd' is correct...

How can you really know with this little bit of information. the other computer pinged succesfull. But if my outbound is blocking then the server won't receive a ping, but when it's is inboud your computer can't receive the ping back.

Resposta D está correta: Regras de entrada Quando você instala o sistema operacional Windows pela primeira vez, o Windows Defender Firewall bloqueia todo o tráfego de entrada não solicitado. Para permitir um certo tipo de tráfego de entrada não solicitado, você deve criar uma regra de entrada que descreva esse tráfego. Regras de saída O Windows Defender Firewall permite todo o tráfego de saída, a menos que uma regra o bloqueie. As regras de saída permitem ou negam explicitamente o tráfego originário de um computador que corresponda aos critérios de uma regra. https://learn.microsoft.com/pt-br/training/modules/explore-microsoft-defender/6-explain-windows-defender-firewall-advanced-security

Outbound rules Windows Defender Firewall allows all outbound traffic unless a rule blocks it. Outbound rules explicitly allow or deny traffic originating from a computer that matches a rule’s criteria. For example, you can configure a rule to explicitly block outbound traffic to a computer by IP address through the firewall, but allow the same traffic for other computer https://learn.microsoft.com/pt-br/training/modules/explore-microsoft-defender/6-explain-windows-defender-firewall-advanced-security

Note those statements in the question * “If the server replies” and “the server does not reply” - Server issue (inbound ICMP network traffic) * “The company uses an application that checks for network connectivity to a server by sending a ping request to the IPv6 address of the server.” - user's perspective (inbound ICMP network traffic) * "You need to ensure that the ping request works from the user's computer.” - FROM THE USER’S COMPUTER The real scenario: the server is not responding to requests or responses from/to user request. BUT we need to make sure that the ping request works from the user’s computer.

If you read the provided link you will see it is B. https://www.howtogeek.com/howto/windows-vista/allow-pings-icmp-echo-request-through-your-windows-vista-firewall/