exam questions

Exam CS0-002 All Questions

View all questions & answers for the CS0-002 exam

Exam CS0-002 topic 1 question 378 discussion

Actual exam question from CompTIA's CS0-002
Question #: 378
Topic #: 1
[All CS0-002 Questions]

The SFTP server logs show thousands of failed login attempts from hundreds of IP addresses worldwide. Which of the following controls would BEST protect the service?

  • A. Whitelisting authorized IP addresses
  • B. Blacklisting unauthorized IP addresses
  • C. Enforcing more complex password requirements
  • D. Establishing a sinkhole service
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Kashim
Highly Voted 1 year, 11 months ago
Selected Answer: A
By whitelisting authorized IP addresses, the SFTP server can mitigate the risk of unauthorized login attempts from worldwide IP addresses. Only connections originating from the pre-approved IP addresses will be allowed, significantly reducing the attack surface and limiting access to legitimate users or systems. Option B, blacklisting unauthorized IP addresses, involves maintaining a list of IP addresses known to be malicious or unauthorized and blocking connections from those addresses. While this can provide some level of protection, it may be challenging to keep up with the constantly changing landscape of potential attackers and their IP addresses.
upvoted 7 times
...
CyberCEH
Most Recent 1 year, 11 months ago
Answer A
upvoted 2 times
...
Hershey2025
1 year, 11 months ago
Answer B is correct
upvoted 1 times
Hershey2025
1 year, 10 months ago
Anser A is easier to implement.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago