What Protects Against Insecure Device Communications?
Short answer
B Host-based firewall
Question
Key Takeaways
This question tests the distinction between active traffic filtering and passive detection, with the common trap being selecting an Intrusion Detection System (IDS) which only monitors traffic rather than blocking it.
A host-based firewall is the primary defense for controlling inbound and outbound traffic on a specific device. The community consensus confirms it is superior to detection systems or general hardening for stopping insecure communications.
Common mistake: Selecting 'System hardening' is a common error because it implies security, but it refers to reducing the attack surface via configuration rather than actively filtering network traffic.
Expert Analysis
Why the Answer Is Correct
A host-based firewall is specifically designed to control inbound and outbound traffic for an individual device. It acts as a barrier that filters network packets based on predefined security rules, effectively blocking unauthorized or insecure connections. This active filtering capability makes it the best choice for protecting against unwanted communications.
Why the Other Options Are Wrong
System hardening involves reducing the attack surface by disabling unused services and applying patches, but it does not actively filter network traffic. An Intrusion Detection System (IDS) is passive; it detects and alerts on suspicious activity but does not prevent it. Anti-malware software focuses on scanning for and removing malicious software files rather than managing network communications.
Community Comment Notes
Commenter [1] explains that a host-based firewall provides a barrier by filtering traffic based on rules, preventing malicious traffic from reaching the device. Commenter [2] highlights the critical difference that firewalls offer both detection and protection, whereas an IDS only provides detection. Commenter [3] agrees that a host-based firewall is the correct solution for this scenario.
Official Reference
https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final
This link opens the official vendor documentation in a new tab.
Exam Strategy
Look for keywords like 'to and from' or 'communications' to identify questions requiring a firewall solution. Remember that detection systems (like IDS) alert you to problems, while firewalls actively block them.
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
Fourgehan 👍 3 Answered BA host-based firewall is designed to control inbound and outbound traffic to and from a device (such as a computer or server). It provides a barrier by filtering network traffic based on a set of predefined security rules, effectively blocking unwanted or insecure communications. It can prevent malicious network traffic from reaching the device, which helps protect it from various network-based attacks
-
9149f41 👍 1 Answered BHost-based firewall= both detection and protection. IDS- only detection.
-
dnn_cbops 👍 1 Answered BI go for a host based firewall in this case
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →