Cisco Certified Support Technician (CCST) CybersecurityNetwork SecurityEasy
A small business owner is concerned about employees accidentally downloading malware from suspicious websites. They want to implement a solution that filters web content and prevents access to known malicious domains. Which network security technology is best suited for this purpose?
- AIntrusion Detection System (IDS)
- BData Loss Prevention (DLP)
- CWeb Proxy Server
- DLoad Balancer
Show answer & explanationAnswer & explanation
Correct answer: C. Web Proxy Server
A web proxy server can filter web content, block access to blacklisted websites, and scan for malware in downloaded files, directly addressing the business owner's concerns about malicious domains and accidental malware downloads.
Why the other options are wrong
- A. An IDS detects suspicious activity but doesn't actively block web content.
- B. DLP focuses on preventing sensitive data from leaving the network, not blocking malicious websites.
- D. A load balancer distributes network traffic across multiple servers to improve performance, not for content filtering.
Web Proxy Server
A server that acts as an intermediary for requests from clients seeking resources from other servers. It can filter content, cache data, and provide anonymity.
- Can block access to malicious websites.
- Filters web content based on policies.
- Enhances security and can improve performance.
Memory trick: Web Proxy: Your internet bouncer, keeping the bad stuff out.