(ISC)2 Certified in Cybersecurity Practice Exam

Which tool effectively filters inbound traffic to mitigate threats?

1. NIDS (network-based intrusion-detection systems)

2. Anti-malware

3. DLP (data loss prevention)

4. Firewall

The correct answer is: Firewall

The tool that effectively filters inbound traffic to mitigate threats is a firewall. Firewalls act as a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. They create a barrier between trusted internal networks and untrusted external networks, effectively filtering traffic to prevent unauthorized access and mitigate potential threats. Firewalls can be configured to allow or block specific types of traffic based on various criteria, such as IP addresses, protocols, and ports. This capability to scrutinize and filter packets of data as they attempt to enter or exit a network is essential for protecting the integrity, confidentiality, and availability of networked information. In contrast, while tools like network-based intrusion detection systems (NIDS) analyze and monitor network traffic for suspicious activity and can alert administrators to potential threats, they do not actively block or filter traffic. Anti-malware software is designed to detect and eliminate malware on devices and does not specifically filter network traffic. Data loss prevention (DLP) focuses on preventing sensitive data from being exfiltrated or accessed without authorization, but it does not inherently act to filter traffic in the way a firewall does. Thus, firewalls are the most effective tool for filtering inbound traffic to protect against threats.