Pete, the compliance manager, wants to meet regulations. Pete would like certain ports blocked only on
all computers that do credit card transactions. Which of the following should Pete implement to BEST
achieve this goal?

A.
A host-based intrusion prevention system

B.
A host-based firewall

C.
Antivirus update system

D.
A network-based intrusion detection system

Explanation:
A host-based firewall is installed on a client system and is used to protect the client system from the
activities of the user as well as from communication from the network or Internet.
Incorrect Answers:
A: A host-based IPS (HIPS) is an intrusion detection and prevention system that runs as a service on a host
computer system. It is used to monitor the machine logs, system events, and application activity for signs
of intrusion. A HIPS is not used to block ports.
C: Antivirus software is used to protect systems against viruses, which are a form of malicious code
designed to spread from one system to another, consuming network resources.
D: A network-based IDS (NIDS) is an intrusion detection system that scans network traffic in real time and
is useful for detecting network-based attacks originating from outside the organization. However, a NIDS
is not used to block ports.
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, pp. 111-112, 116-117, 161-162
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 13-16, 246