SSCP · Question #1105
Which of the following is a reason to use a Firewall?
The correct answer is C. To prevent or stop potential intrusions. A primary purpose of a firewall is to prevent or stop potential intrusions by enforcing security policies that control network traffic based on predefined rules.
Question
Which of the following is a reason to use a Firewall?
Options
- ATo evaluate intrusions as they happen
- BTo watch for internal attacks
- CTo prevent or stop potential intrusions
- DTo signal an alarm on a suspected intrusion
How the community answered
(38 responses)- A3% (1)
- C95% (36)
- D3% (1)
Why each option
A primary purpose of a firewall is to prevent or stop potential intrusions by enforcing security policies that control network traffic based on predefined rules.
Evaluating intrusions as they happen is typically the role of an Intrusion Detection System (IDS) or Security Information and Event Management (SIEM) system, not a primary function of a firewall.
While some advanced firewalls (like NGFWs) can offer some internal network segmentation, their primary role is traditionally perimeter defense, and dedicated solutions like IDS/IPS or endpoint security are better for watching for internal attacks.
Firewalls operate by filtering network traffic, blocking unauthorized access attempts, and enforcing security policies to actively prevent malicious data or connections from reaching or leaving a protected network, thereby stopping potential intrusions.
Signaling an alarm on a suspected intrusion is a function of an Intrusion Detection System (IDS) or Intrusion Prevention System (IPS), not the core preventative role of a firewall.
Concept tested: Firewall purpose and function
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-overview
Topics
Community Discussion
No community discussion yet for this question.