CompTIA Tech+ (FC0-U71)SecurityHard
A company is concerned about employees downloading unauthorized software or accessing malicious websites. To prevent these actions, the IT department decides to implement a solution that filters web content and blocks access to specific categories of websites. Which security measure is being deployed?
- AVirtual Private Network (VPN)
- BWeb Content Filter
- CIntrusion Detection System (IDS)
- DData Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: B. Web Content Filter
A web content filter is specifically designed to control and restrict access to websites based on categories, URLs, or keywords, directly addressing the concern of accessing malicious or unauthorized sites.
Why the other options are wrong
- A. A VPN creates a secure, encrypted connection over a public network, primarily for secure remote access, not for filtering internal web usage.
- C. An IDS monitors network or system activities for malicious or policy-violating behavior but does not actively block access to websites.
- D. DLP systems prevent sensitive information from leaving the organization's control, which is about data outflow, not website access.
Web Content Filter
A software or hardware solution used to monitor and restrict access to certain websites or categories of web content based on predefined rules.
- Blocks access to malicious or inappropriate sites
- Can enforce acceptable use policies
- Often integrated into firewalls or proxy servers
Memory trick: Network tools protect, each with a specific task.