What Protects Against Insecure Device Communications?
Which of the following provides the best protection against unwanted or insecure communications to and from a device?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the distinction between active traffic filtering and passive detection, with the common trap being selecting an Intrusion Detection System (IDS) which only monitors traffic rather than blocking it.
A host-based firewall is the primary defense for controlling inbound and outbound traffic on a specific device. The community consensus confirms it is superior to detection systems or general hardening for stopping insecure communications.
Selecting 'System hardening' is a common error because it implies security, but it refers to reducing the attack surface via configuration rather than actively filtering network traffic.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A host-based firewall is specifically designed to control inbound and outbound traffic for an individual device. It acts as a barrier that filters network packets based on predefined security rules, effectively blocking unauthorized or insecure connections. This active filtering capability makes it the best choice for protecting against unwanted communications.Why the Other Options Are Wrong
System hardening involves reducing the attack surface by disabling unused services and applying patches, but it does not actively filter network traffic. An Intrusion Detection System (IDS) is passive; it detects and alerts on suspicious activity but does not prevent it. Anti-malware software focuses on scanning for and removing malicious software files rather than managing network communications.Community Comment Notes
Commenter [1] explains that a host-based firewall provides a barrier by filtering traffic based on rules, preventing malicious traffic from reaching the device. Commenter [2] highlights the critical difference that firewalls offer both detection and protection, whereas an IDS only provides detection. Commenter [3] agrees that a host-based firewall is the correct solution for this scenario.Official Reference
Exam Strategy
Look for keywords like 'to and from' or 'communications' to identify questions requiring a firewall solution. Remember that detection systems (like IDS) alert you to problems, while firewalls actively block them.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →