100-150 Question 129
Single answerA company has various devices on its network, including IoT devices, IP phones, printers, servers, and employee computers. The network administrator notices increased traffic and suspects that one of the IoT devices has been compromised and is sending unauthorized traffic to external servers. Which device would be the most effective to monitor and block this suspicious traffic while minimizing disruption to the rest of the network?
- A
A firewall configured with traffic filtering rules
- B
A network switch configured with VLAN segmentation
- C
An intrusion detection system (IDS)
- D
An unmanaged switch that connects IoT devices
Show answer and explanation
Correct answer: A
Explanation
In this scenario, the most effective device to monitor and block suspicious traffic from the compromised IoT device is a firewall. Firewalls can inspect and filter traffic based on rules, ensuring that unauthorized communication is stopped, while other devices on the network remain unaffected. Other options, like VLAN segmentation or an IDS, are useful for network security but do not directly block traffic.
- A. Correct.
A firewall configured with traffic filtering rules can monitor network traffic and block unauthorized communication from specific devices, making it the most effective option to address the compromised IoT device.
- B. Incorrect.
A network switch with VLAN segmentation can isolate IoT devices from other parts of the network but cannot directly monitor or block unauthorized traffic to external servers.
- C. Incorrect.
An intrusion detection system (IDS) can detect suspicious activity but cannot block traffic. It only provides alerts, requiring additional tools to take action.
- D. Incorrect.
An unmanaged switch does not provide any monitoring or blocking capabilities, as it simply forwards traffic without any control or intelligence.