Which of the following controls should critical application servers implement to protect themselves from other
potentially compromised application services?

A.
NIPS

B.
Content filter

C.
NIDS

D.
Host-based firewalls

Explanation:
A host-based firewall is designed to protect the host from network based attack by using filters to limit the
network traffic that is allowed to enter or leave the host. The action of a filter is to allow, deny, or log the network
packet. Allow enables the packet to continue toward its destination. Deny blocks the packet from going any
further and effectively discarding it. Log records information about the packet into a log file. Filters can be based
on protocol and ports. By blocking protocols and ports that are not required, other potentially compromised
application services would be prevented from being exploited across the network.