GCFA · Question #319
You work as a Network Administrator for NetTech Inc. The company's network is connected to the Internet. For security, you want to restrict unauthorized access to the network with minimum…
The correct answer is B. Implement firewall on the network. A hardware firewall is the correct choice for restricting unauthorized network access with minimum administrative effort using a hardware-based solution.
Question
You work as a Network Administrator for NetTech Inc. The company's network is connected to the Internet. For security, you want to restrict unauthorized access to the network with minimum administrative effort. You want to implement a hardware-based solution. What will you do to accomplish this?
Options
- AConnect a brouter to the network.
- BImplement firewall on the network.
- CConnect a router to the network.
- DImplement a proxy server on the network.
How the community answered
(30 responses)- A3% (1)
- B77% (23)
- C13% (4)
- D7% (2)
Why each option
A hardware firewall is the correct choice for restricting unauthorized network access with minimum administrative effort using a hardware-based solution.
A brouter combines bridging and routing functions for network connectivity purposes and is not designed to enforce security access control policies.
A hardware firewall appliance sits at the network perimeter and inspects, filters, and controls traffic based on defined security policies, blocking unauthorized access effectively. It provides centralized, dedicated security enforcement without requiring per-host software configuration, which minimizes administrative effort. This directly satisfies both the hardware-based and low-overhead requirements of the scenario.
A standard router provides basic packet-level filtering but lacks the stateful inspection, application-layer filtering, and comprehensive security policy capabilities of a dedicated firewall.
A proxy server can mediate and filter some traffic but is typically a software-based solution running on a general-purpose host, which does not satisfy the requirement for a hardware-based implementation.
Concept tested: Hardware firewall for network perimeter security
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.