A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?

The correct answer is A. Geoblock the offending source country. Geoblocking is a security measure that restricts or blocks access to a network based on geographic location by analyzing IP addresses. Since the company does not do business with that country, blocking all traffic from that country reduces unnecessary and potentially malicious…

Submitted by ricky.ec· Mar 6, 2026Security Operations

Question

Options

AGeoblock the offending source country.
BBlock the IP range of the scans at the network firewall.
CPerform a historical trend analysis and look for similar scanning activity.
DBlock the specific IP address of the scans at the network firewall.

How the community answered

(55 responses)

A
82% (45)
B
2% (1)
C
5% (3)
D
11% (6)

Explanation

Geoblocking is a security measure that restricts or blocks access to a network based on geographic location by analyzing IP addresses. Since the company does not do business with that country, blocking all traffic from that country reduces unnecessary and potentially malicious traffic, lowering the attack surface and minimizing exposure to threats originating there.

Topics

#geoblocking#network security#firewall rules#threat mitigation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice