RHEL 8, RH134, Chapter 13, Lesson 4 - Comprehensive Review, part 3
I'd suggest that a change is made to this step:
Instead of blocking 172.25.250.10/32 altogether, change it so that SSH (as a service) is added into the block zone.
If left as-is, Apache cannot be tested from servera because the firewall rule blocks all access from servera's IP address.
I preach to my students that they should test everything they do. Because, as we all know, there are no grading scripts in real life.