CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Network Basics and Security
A company wants a security control that sits between its internal network and the internet and permits or blocks traffic based on a predefined set of rules covering IP addresses, ports and protocols. Which tool best fits this description?
The tool is a firewall. It sits at the boundary between an internal network and the internet and allows or blocks traffic according to predefined rules on IP addresses, ports and protocols. Switches, caches and certificates do not perform this perimeter rule-based filtering function.
- AFirewallCorrect
- BProxy cache server
- CNetwork switch
- DDigital certificate
Explanation
A firewall enforces rules on traffic passing between networks, filtering by address, port and protocol. A switch only forwards frames within a LAN and does not apply perimeter policy. A proxy cache is mainly meant to speed up access, and a digital certificate authenticates identity.
Did you get it right without looking?
One question tells you little. A timed set on Network Basics and Security shows your real accuracy, how long you take and where you lose marks.
More Network Basics and Security questions
- Mehta Textiles has offices in Surat, Chennai and Kolkata, linked through leased lines and the public internet so that all branches access a …
- Which statement best describes how a digital signature on an electronic document is created and verified under the usual asymmetric scheme r…
- A director receives a PDF of minutes bearing a valid digital signature from the Chairman. Later, one word in the PDF is altered by an unknow…
- In a client-server network of a Mumbai firm, a central machine stores the company's files, authenticates users and serves requests from empl…
- Under the Information Technology Act, 2000 as taught for this paper, which body is the national nodal agency for responding to computer secu…
- The security team of Bharat Textiles Ltd. deploys a system that monitors network traffic, compares it with known attack signatures and autom…