SK0-005 · Question #123
A global organization keeps personnel application servers that are local to each country. However, a security audit shows these application servers are accessible from sites in other countries…
The correct answer is A. Configure a firewall. The requirement is to restrict network access based on geographic origin (country-level access control). A firewall can be configured with rules to permit traffic only from IP address ranges associated with the local country and block all other international traffic - a…
Question
A global organization keeps personnel application servers that are local to each country. However, a security audit shows these application servers are accessible from sites in other countries. Which of the following hardening techniques should the organization use to restrict access to only sites that are in the same country?
Options
- AConfigure a firewall
- BClose the unneeded ports
- CInstall a HIDS
- DDisable unneeded services.
How the community answered
(57 responses)- A89% (51)
- B2% (1)
- C7% (4)
- D2% (1)
Explanation
The requirement is to restrict network access based on geographic origin (country-level access control). A firewall can be configured with rules to permit traffic only from IP address ranges associated with the local country and block all other international traffic - a technique known as geo-blocking or geo-restriction. This directly solves the problem of cross-country accessibility. Closing unneeded ports (B) limits exposure by service type but does not restrict access by geographic location. A HIDS (C) detects suspicious activity on the host but does not block incoming connections at the network level. Disabling unneeded services (D) reduces attack surface but, like closing ports, does not enforce geographic access control.
Topics
Community Discussion
No community discussion yet for this question.