An organization is considering connecting a critical PC-based system to the Internet. Which of the
following would provide the BEST protection against hacking?

A.
An application-level gateway

B.
A remote access server

C.
A proxy server

D.
Port scanning

Explanation:
An application-level gateway is the best way to protect against hacking because it can define with
detail rules that describe the type of user or connection that is or is not permitted, it analyzes in
detail each package, not only in layers one through four of the OSI model but also layers five
through seven, which means that it reviews the commands of each higher-level protocol (HTTP,
FTP, SNMP, etc.). For a remote access server, there is a device (server) that asks for a username
and password before entering the network. This is good when accessing private networks, but it
can be mapped or scanned from the Internet creating security exposure. Proxy servers can provide
protection based on the IP address and ports. However, an individual is needed who really knows
how to do this, and applications can use different ports for the different sections of the program.
Port scanning works when there is a very specific task to complete, but not when trying to control
what comes from the Internet, or when all the ports available need to be controlled. For example,
the port for Ping (echo request) could be blocked and the IP addresses would be available for the
application and browsing, but would not respond to Ping.