A firewall is an effective method of preventing trojan horse programs from contacting their master server.

Question

Options

• ATrue
• BFalse

• A
  76% (25)
• B
  24% (8)

Explanation

Important caveat before diving in: The marked answer here is actually contested in cybersecurity. Many reputable security certification materials (Security+, CEH) teach the opposite - that this statement is False. Here's why both sides exist:

Why A (True) could be defended: A properly configured firewall with strict outbound rules - particularly a host-based firewall that controls which applications can initiate connections - can block a trojan from calling home to its command-and-control (C2) server before the connection is established.

Why B (False) is arguably more accurate: Traditional firewalls filter by port/IP, not application behavior. Trojans are specifically engineered to evade this by using commonly allowed ports (80/HTTP, 443/HTTPS) or tunneling inside legitimate traffic - making the firewall effectively blind to the malicious communication.

The actual nuance: Next-generation firewalls (NGFWs) with deep packet inspection and application awareness are more effective, but standard firewalls are generally not considered an effective standalone defense against trojans.

Memory tip: Think "Trojan horse = disguise." Just as the mythical Trojan horse hid soldiers inside a gift, trojan malware hides its traffic inside legitimate-looking network protocols - allowing it to slip past a firewall that only checks the "outside" of the package. If your exam source says True, it's assuming a well-configured outbound-filtering firewall; the safer real-world answer is typically False.

I'd recommend verifying which exam/certification this question is from, as the consensus answer in most modern security curricula is B (False).

No community discussion yet for this question.