Pete, the compliance manager, wants to meet regulations. Pete would like certain ports blocked only on all
computers that do credit card transactions. Which of the following should Pete implement to BEST achieve this
goal?
A.
A host-based intrusion prevention system
B.
A host-based firewall
C.
Antivirus update system
D.
A network-based intrusion detection system
Explanation:
A host-based firewall is installed on a client system and is used to protect the client system from the activities of
the user as well as from communication from the network or Internet.
Key concept: We want to block PORTS in a PARTICULAR (s) HOST.
So in here I want to block ports at a HOST level (as opposed to at NETWORK level)
This is achieved by a HOST-BASED-FIREWALL.
In addition to that, A, C and D do not block ports at any level.
A.A host-based intrusion prevention system – This does not block ports
C.Antivirus update system – This does not block ports. Port would still be open for other types of illegal activities not containing a virus.
D.A network-based intrusion detection system – This is at “network” level and would apply to ALL computers in the network, and not just on “computers that do credit card transactions”
So the correct answer is:
B- A host-based firewall is the only option that blocks ports at HOST level
A host-based firewall is installed on a client system and is used to protect the client system from the activities of the user as well as from communication from the network or Internet.
0
0