Malicious traffic from an internal network has been detected on an unauthorized port on an application server. Which of the following network-based security controls should the engineer consider…

ACLs (Access Control Lists) are network-based security controls that allow administrators to define rules to permit or deny traffic based on various criteria, including source/destination IP addresses, protocols, and specific port numbers. Implementing an ACL on a network device can explicitly block unauthorized traffic attempting to use a specific port on the application server, directly mitigating the detected threat.

HIPS (Host-based Intrusion Prevention System) operates on individual endpoints, providing host-level protection rather than network-based control to block traffic at specific ports across the network.

NAT (Network Address Translation) is used to modify network address information in packet headers, primarily for IP address conservation or network segregation, and does not directly control access to unauthorized ports for security.

MAC filtering controls network access based on hardware addresses (MAC addresses), which is easily circumvented by MAC spoofing and does not specifically address unauthorized port usage by potentially legitimate devices.