N10-005 · Question #775
The process of restricting internal web traffic to an employee-only website based upon Layer 3 addresses is known as which of the following?
The correct answer is D. IP filtering. Restricting access to internal resources based on Layer 3 (IP) addresses is the definition of IP filtering, which is used to enforce access policies on web traffic.
Question
The process of restricting internal web traffic to an employee-only website based upon Layer 3 addresses is known as which of the following?
Options
- AMAC filtering
- BTraffic shaping
- CSession filtering
- DIP filtering
How the community answered
(54 responses)- A4% (2)
- B2% (1)
- D94% (51)
Why each option
Restricting access to internal resources based on Layer 3 (IP) addresses is the definition of IP filtering, which is used to enforce access policies on web traffic.
MAC filtering uses Layer 2 hardware addresses to control access and is not applicable to routing-based decisions about web traffic at Layer 3.
Traffic shaping manages the rate and priority of traffic flows to optimize bandwidth usage, and does not restrict access based on IP addresses.
Session filtering refers to stateful inspection that tracks the state of active connections, and is not the term for restricting access based solely on Layer 3 IP addresses.
IP filtering evaluates the source or destination IP address in each packet's Layer 3 header to determine whether traffic should be allowed or denied. Using IP filtering to restrict access to an employee-only website ensures that only clients with authorized IP addresses (such as those on the corporate subnet) can reach the resource. This is a straightforward access control mechanism implemented in firewalls or ACLs.
Concept tested: IP filtering for Layer 3 access control
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/rules
Topics
Community Discussion
No community discussion yet for this question.