210-250 · Question #151
Which Statement about personal firewalls is true?
The correct answer is D. They can protect a system by denying probing requests. Personal firewalls operate on individual hosts and can block unsolicited inbound connection attempts and probing requests such as port scans. They are host-based controls, not network-wide or content-aware solutions.
Question
Which Statement about personal firewalls is true?
Options
- AThey are resilient against kernel attacks
- BThey can protect email messages and private documents in a similar way to a VPN
- CThey can protect the network against attacks
- DThey can protect a system by denying probing requests
How the community answered
(69 responses)- A1% (1)
- B4% (3)
- C1% (1)
- D93% (64)
Why each option
Personal firewalls operate on individual hosts and can block unsolicited inbound connection attempts and probing requests such as port scans. They are host-based controls, not network-wide or content-aware solutions.
Personal firewalls run at the OS level and can themselves be disabled or bypassed by kernel-mode malware or rootkits, making them vulnerable to kernel attacks rather than resilient against them.
Personal firewalls filter network traffic based on rules; they do not encrypt stored documents or email content the way a VPN encrypts data in transit.
Personal firewalls protect only the individual host on which they are installed; they cannot enforce policies for or protect other devices on the broader network.
A personal (host-based) firewall inspects inbound and outbound traffic at the individual system level and can drop or reject unsolicited probe packets, including port scans and connection requests to closed services. This prevents attackers from discovering open ports or services on the protected host.
Concept tested: Personal host-based firewall capabilities and limitations
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-overview
Topics
Community Discussion
No community discussion yet for this question.