CompTIA Security+ (SY0-701) — Question 359
Which of the following provides the best protection against unwanted or insecure communications to and from a device?
Answer options
- A. System hardening
- B. Host-based firewall
- C. Intrusion detection system
- D. Anti-malware software
Correct answer: B
Explanation
The Host-based firewall is specifically designed to monitor and control incoming and outgoing network traffic based on predetermined security rules, making it the best option for protecting against unwanted communications. System hardening focuses on securing the system itself, while intrusion detection systems mainly monitor for breaches after they occur, and anti-malware software targets malicious software rather than direct communication management.