Each server on a subnet is configured to only allow SSH access from the administrator's workstation. Which of the following BEST describes this implementation?

The correct answer is A. Host-based firewalls. Host-based firewalls are software firewalls running on individual hosts that control inbound and outbound traffic at the operating system level. Configuring each server to only accept SSH connections from a specific IP address (the admin's workstation) is a host-based firewall…

Security architecture

Question

Options

AHost-based firewalls
BNetwork firewalls
CNetwork proxy
DHost intrusion prevention

How the community answered

(25 responses)

A
88% (22)
B
8% (2)
C
4% (1)

Explanation

Host-based firewalls are software firewalls running on individual hosts that control inbound and outbound traffic at the operating system level. Configuring each server to only accept SSH connections from a specific IP address (the admin's workstation) is a host-based firewall rule - the rule is enforced locally on each server. A network firewall (B) operates at the network perimeter and is not installed on individual hosts. A network proxy (C) forwards traffic on behalf of clients and doesn't match this scenario. Host intrusion prevention (D) detects and blocks malicious activity patterns but doesn't define access rules based on source IP for specific services.

Topics

#host-based firewall#SSH#access restriction#network security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice