200-901 practice question 13 of 35

Which device is a system that monitors and controls incoming and outgoing network traffic based on predetermined security rules?

Full set: 468 questions

Domain Application Deployment and Security

Answer options
A: Switch
B: Router
C: Firewall Correct answer
D: Load balancer
Correct Answer:
C. Firewall
Explanation

A firewall is a network security device or system that serves as a barrier between a trusted network and an untrusted network, such as the Internet. Its fundamental purpose is to monitor all incoming and outgoing network traffic and permit or deny data packets based on a set of configured security rules. This process involves inspecting packet headers and, in more advanced firewalls, the packet's payload, to enforce security policies. This definition directly matches the description provided in the question, making it the most accurate answer.

Why Incorrect

A. Switch: A switch is a Layer 2 device whose primary function is to forward data frames to specific devices within a local area network (LAN) based on MAC addresses.
B. Router: A router is a Layer 3 device that forwards data packets between different computer networks. While it can perform some filtering with ACLs, its main role is path determination and forwarding.
D. Load balancer: A load balancer's primary role is to distribute network traffic across multiple servers to optimize resource use, maximize throughput, and ensure high availability, not to enforce security rules.

References

1. Cisco Systems, Inc. (2023). What Is a Firewall? Cisco.com. Retrieved from the official Cisco website. The document states, "A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules."

2. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. In Chapter 8, "Security in Computer Networks," Section 8.7, "Firewalls," a firewall is defined as a system that filters packet traffic, allowing authorized packets to pass and blocking others based on security rules applied to packet headers and data.

3. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 2. Cisco Press. Chapter 22, "Security Architectures," under the section "Firewalls," describes firewalls as systems that "sit at a network border and filter traffic," using rules to decide which traffic to permit or deny.

Scroll to Top