100-150 Question 259
Single answerA company is implementing a new firewall to secure its network. During the configuration, the administrator notices that traffic from an unauthorized IP address is attempting to access sensitive resources. Which security measure should the administrator implement to prevent this?
- A
Enable IP filtering to block the specific unauthorized IP address.
- B
Disable all incoming traffic to the network.
- C
Configure VLANs to segment the network.
- D
Implement Network Address Translation (NAT) for internal devices.
Show answer and explanation
Correct answer: A
Explanation
To prevent unauthorized access from a specific IP address, IP filtering is the most effective security measure. It allows the administrator to define rules to block traffic from undesired sources while allowing legitimate traffic to flow. Other options such as VLANs or NAT do not directly address this specific security concern.
- A. Correct.
Enabling IP filtering allows the administrator to explicitly block traffic from specific unauthorized IP addresses, effectively preventing access to sensitive resources.
- B. Incorrect.
Disabling all incoming traffic would block legitimate connections as well, leading to service disruptions and is not a practical solution.
- C. Incorrect.
Configuring VLANs is useful for network segmentation but does not directly address the issue of blocking traffic from an unauthorized IP address.
- D. Incorrect.
Implementing NAT is used to hide internal IP addresses from external networks and manage IP address translation, but it does not block specific unauthorized IP addresses.