A security policy allows employees to access the Internet. While searching for office supplies on the Internet, a corporate user mistypes a URL, connects to a malicious website, and unknowingly…

Question

Options

• Adeploy a firewall with content filtering capabilities on the corporate perimeter
• Bdeny http, https and ftp into and out of the internet
• Cconfigure digital certificates for all users to authenticate internet downloads
• Dpermit only connections only to TCP port 443

• A
  83% (15)
• B
  6% (1)
• D
  11% (2)

Explanation

Option A is correct because a perimeter firewall with content filtering (also called a web content filter or URL filtering) inspects outbound web traffic, blocks known malicious sites and categories, and can prevent malware downloads - all while still allowing legitimate internet access. Option B is wrong because blocking HTTP, HTTPS, and FTP entirely would deny all internet access, which violates the stated policy. Option C is wrong because digital certificates authenticate identity; they don't inspect or block malicious content during downloads. Option D is wrong because permitting only TCP 443 (HTTPS) still allows users to reach malicious HTTPS sites - the malicious site in this scenario could easily be served over HTTPS.

Memory tip: Think "filter, don't block" - the policy requires internet access, so the solution must allow but inspect, which is exactly what a content-filtering firewall does. Any answer that fully blocks traffic (B, D partially) or only handles authentication (C) fails the "still allow access" requirement.

No community discussion yet for this question.