SY0-501 Question #167: Real Exam Question with Answer & Explanation

Question

Joe, a technician, is working remotely with his company provided laptop at the coffee shop near his home. Joe is concerned that another patron of the coffee shop may be trying to access his laptop. Which of the following is an appropriate control to use to prevent the other patron from accessing Joe's laptop directly?

Options

• Afull-disk encryption
• BHost-based firewall
• CCurrent antivirus definitions
• DLatest OS updates

Explanation

Joe is concerned about unauthorized network access to his laptop from another patron on an untrusted public network. A host-based firewall is the appropriate control to prevent direct network access attempts.

Common mistakes.

• A. Full-disk encryption protects data at rest by encrypting the entire storage drive, not against network access attempts while the laptop is powered on and in use.
• C. Current antivirus definitions primarily protect against malicious software (malware) and viruses, not against unauthorized network connection attempts from another user.
• D. Latest OS updates patch known vulnerabilities and improve system stability, which is essential for security, but a firewall is the specific control designed to actively block unwanted network connections.

Concept tested. Host-based firewall for network access control

Reference. https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/windows-defender-firewall-with-advanced-security-overview

No community discussion yet for this question.