Exam N10-006 topic 6 question 32 discussion

Actual exam question from CompTIA's N10-006

Question #: 32
Topic #: 6

The Chief Information Officer (CIO) of an organization is concerned that the current locally-hosted, software threat solution is not agile enough. The CIO points to specific examples of zero-day threats that have recently taken a day or more to receive patches. The IT team is tasked with finding a solution that has a better chance of stopping emerging threats and stopping zero-day threats more quickly.
Which of the following solutions would have the BEST chance of meeting these goals?

A. Stateful firewall
B. Premise-based IDS
C. Host-based IDS
D. Cloud-based anti-malware

Show Suggested Answer

Suggested Answer: A 🗳️

by mad at July 4, 2019, 11:10 a.m.

Comments

Submit Cancel

mad

5 years, 11 months ago

Out of all the possible answers listed, A would be the best option, but in this day and age with even SOHO grade hardware-based firewalls (see SonicWall range as an example) the Stateful firewalls (as to not being stateless firewalls - see link below) feature is already the norm and included in any firewall product range described as 'next-generation' firewalls (NGFW). The gist here is that opting for a 'Stateful firewall' as an additional security measure would be a moot topic as all most modern firewall products have the feature already as standard. This is not 2001. Anyhow, further reading (if a stateless is still deemed a viable option these days): Stateful vs. Stateless Firewalls https://www.cybrary.it/0p3n/stateful-vs-stateless-firewalls/

upvoted 1 times

...