CompTIA Network+ (N10-006) — Question 28

An administrator needs to install a centrally located firewall that needs to block specific incoming and outgoing IP addresses, without denying legitimate return traffic.
Which of the following firewall types should the administrator install?

Answer options

• A. A host- based firewall
• B. A network-based firewall
• C. A host-based stateful firewall
• D. A stateless network-based firewall.

Correct answer: D

Explanation

The correct answer is D, a stateless network-based firewall, as it can filter traffic based on predefined rules without maintaining the state of connections, allowing legitimate return traffic. Options A and C are incorrect because host-based firewalls operate on individual devices rather than centrally. Option B is not correct because a network-based firewall typically maintains state information, which is not what the question specifies.