It is better to have an ACL that permits access to a single internal webserver than one that allows access to all internal webservers.

Question

Quizplus · Accepted Answer

It is always better to have a more restrictive access control policy. Allowing access to a single internal webserver limits the attack surface and reduces the risk of unauthorized access or data breaches. Allowing access to all internal webservers increases the attack surface and can make it easier for attackers to find vulnerabilities and exploit them.

It Is Better to Have an ACL That Permits Access