200-201 Question 184
Select 3A security analyst is tasked with protecting a critical server that processes sensitive financial data. The analyst decides to configure a host-based firewall on the server. Which of the following actions should the analyst take to effectively secure the server while maintaining its functionality?
- A
Allow inbound traffic only from specific trusted IP addresses.
- B
Block all outbound traffic originating from the server.
- C
Permit only necessary application ports and services to communicate.
- D
Disable logging to minimize resource usage on the server.
- E
Enable alerts for unauthorized access attempts.
Show answer and explanation
Correct answers: A, C, E
Explanation
Host-based firewalls are a key layer of defense for servers. To secure the server effectively, the analyst should configure the firewall to allow inbound traffic only from trusted sources, restrict communication to necessary ports and services, and enable alerts to detect and respond to unauthorized access attempts. Logging should not be disabled, as it is crucial for monitoring and auditing security events, and blocking all outbound traffic could disrupt legitimate operations.
- A. Correct.
Allowing inbound traffic only from specific trusted IP addresses minimizes the risk of unauthorized access while ensuring legitimate communication is not blocked.
- B. Incorrect.
Blocking all outbound traffic is overly restrictive and can disrupt legitimate operations, such as updates or data transmissions, necessary for the server's functionality.
- C. Correct.
Permitting only necessary application ports and services reduces the attack surface by limiting exposure to only what is required for the server to function.
- D. Incorrect.
Disabling logging prevents the ability to monitor and audit potential threats, which is critical for identifying and responding to security incidents.
- E. Correct.
Enabling alerts for unauthorized access attempts provides real-time visibility into potential attacks, allowing the analyst to respond quickly to threats.