nerdexam
Cisco

200-301 · Question #291

Which device permits or denies network traffic based on a set of rules?

The correct answer is A. firewall. A firewall is a network security device that monitors and filters incoming and outgoing network traffic based on predefined security rules.

Submitted by jakub_pl· Mar 5, 2026Security Fundamentals

Question

Which device permits or denies network traffic based on a set of rules?

Options

  • Afirewall
  • Bswitch
  • Caccess point
  • Dwireless controller

How the community answered

(18 responses)
  • A
    94% (17)
  • B
    6% (1)

Why each option

A firewall is a network security device that monitors and filters incoming and outgoing network traffic based on predefined security rules.

AfirewallCorrect

A firewall is specifically designed to enforce security policies by permitting or denying network traffic based on rules such as source/destination IP addresses, port numbers, and application protocols.

Bswitch

A switch operates at Layer 2 (data link layer) and forwards traffic based on MAC addresses within a local network segment, without inspecting or filtering based on higher-layer rules.

Caccess point

An access point connects wireless devices to a wired network and primarily handles wireless connectivity and Layer 2 forwarding, not policy-based traffic filtering.

Dwireless controller

A wireless controller centrally manages access points and their configurations, but it does not directly perform packet filtering based on security rules like a firewall.

Concept tested: Firewall function

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-overview

Topics

#firewall#network security#traffic filtering#access control

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice