200-901 practice question 13 of 35
Which device is a system that monitors and controls incoming and outgoing network traffic based on predetermined security rules?
Full set: 468 questionsDomain Application Deployment and Security
A firewall is a network security device or system that serves as a barrier between a trusted network and an untrusted network, such as the Internet. Its fundamental purpose is to monitor all incoming and outgoing network traffic and permit or deny data packets based on a set of configured security rules. This process involves inspecting packet headers and, in more advanced firewalls, the packet's payload, to enforce security policies. This definition directly matches the description provided in the question, making it the most accurate answer.
A. Switch: A switch is a Layer 2 device whose primary function is to forward data frames to specific devices within a local area network (LAN) based on MAC addresses.
B. Router: A router is a Layer 3 device that forwards data packets between different computer networks. While it can perform some filtering with ACLs, its main role is path determination and forwarding.
D. Load balancer: A load balancer's primary role is to distribute network traffic across multiple servers to optimize resource use, maximize throughput, and ensure high availability, not to enforce security rules.
1. Cisco Systems, Inc. (2023). What Is a Firewall? Cisco.com. Retrieved from the official Cisco website. The document states, "A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules."
2. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. In Chapter 8, "Security in Computer Networks," Section 8.7, "Firewalls," a firewall is defined as a system that filters packet traffic, allowing authorized packets to pass and blocking others based on security rules applied to packet headers and data.
3. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 2. Cisco Press. Chapter 22, "Security Architectures," under the section "Firewalls," describes firewalls as systems that "sit at a network border and filter traffic," using rules to decide which traffic to permit or deny.
Keep practicing
Take the free 200-901 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 200-901 practice questions
- Question 2What should a CI/CD pipeline aim to achieve?
- Question 4What are two advantages of version control software? (Choose two.)
- Question 8On which network plane is routing protocol traffic handled?
- Question 9Which protocol must be allowed on the firewall so that NTP services work properly?
- Question 10Which detail is included in a routing table?
- Question 11Which two descriptions can be given to an application that is interacting with a webhook?…
