During deprovisioning of an application, which firewall-related action is typically required?

• A. Remove the port from the firewall completely
• B. Disable the rule in the firewall that allowed the traffic
• C. Reconfigure to use a different port and keep the same rule
• D. Update firewall to a broader rule set

Answer: (B)

When deprovisioning an application, the primary goal is to revoke any access the app has over the network. Firewalls control which traffic is permitted, so the most precise and safe action is to disable the specific rule that allowed the application’s traffic. This stops that app’s communications exactly as configured, and it’s easy to reverse and audit as part of offboarding.

Removing the port entirely is too broad and can disrupt other services that rely on that port or shared configurations. Reconfiguring to a different port while keeping the same rule would still leave a path open, just on a new port, which undermines the deprovisioning intent. Updating to a broader rule set would increase access, which is the opposite of what you want when shutting down an application.