What are two effective ways to prevent port scanning? (Choose two.)

Inspecting network traffic flows allows for the detection of unusual connection attempts to various ports, identifying the characteristic patterns of a port scan and enabling preventative blocking. Firewalls and intrusion prevention systems (IPS) perform this inspection to identify and block such activities.

GlobalProtect is a VPN solution primarily used for secure remote access and endpoint protection, not a direct method for preventing network-wide port scanning attacks on infrastructure.

Implementing continuous monitoring, often through SIEMs or security analytics platforms, provides real-time alerts and visibility into network activity, allowing security teams to quickly identify and respond to ongoing port scan attempts before they can lead to successful exploitation. This proactive approach helps in blocking scanners.

Virtualizing network traffic (e.g., using VLANs or network virtualization platforms) isolates traffic but does not inherently prevent a malicious actor from attempting to scan ports within or across virtualized segments if they have access to the network.