SK0-003 · Question #589
Which of the following is the BEST reason to implement a firewall on a server?
The correct answer is C. To block certain traffic by ports. Firewalls are primarily used to control network traffic by permitting or denying it based on predefined rules, often involving ports and protocols.
Question
Which of the following is the BEST reason to implement a firewall on a server?
Options
- ATo watch for bandwidth issues
- BTo protect the server from all traffic
- CTo block certain traffic by ports
- DTo monitor certain malicious traffic
How the community answered
(23 responses)- B9% (2)
- C87% (20)
- D4% (1)
Why each option
Firewalls are primarily used to control network traffic by permitting or denying it based on predefined rules, often involving ports and protocols.
While some firewalls might have logging capabilities that could indirectly assist in diagnosing bandwidth issues, their primary function is not bandwidth monitoring.
Firewalls are designed to filter traffic, not block all traffic, as that would render the server inaccessible for legitimate services.
A firewall's core function is to filter incoming and outgoing network traffic based on rules that specify allowed or denied ports, protocols, and IP addresses. This allows administrators to control exactly what services are exposed or accessed on a server.
Intrusion Detection Systems (IDS) or Security Information and Event Management (SIEM) tools are primarily responsible for monitoring malicious traffic, although firewalls can log denied attempts.
Concept tested: Firewall function - traffic filtering by port
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security
Topics
Community Discussion
No community discussion yet for this question.