Firewall PBQs: CompTIA SecurityX (CAS-005)

Your organization's DMZ web server (10.1.0.0/24) currently accepts both HTTP and HTTPS from the internet. A new security policy requires all public web traffic to use HTTPS only, and HTTP must be blocked. Additionally, SSH access to the DMZ is wide open and must be restricted to the management subnet (10.2.0.0/24). Review the firewall rules and correct them to comply with the updated policy.