GSLC-2020: GIAC Security LeadershipDemo

By GIAC · Question Mode

QuestionQ393

Network Security Architecture

IP blocking is a technique that stops connections between a server or website and specified IP addresses or address ranges. Which of the following tools use this technique?

Each correct answer represents a complete solution. Choose all that apply.

Choose three
  • A SSHGuard
  • B portsentry
  • C OpenSSL
  • D nmap
  • E Fail2Ban
Explanation

SSHGuard blocks repeat attackers through firewall backends. PortSentry can block a detected port-scanning host through firewall rules, hosts.deny, or a dropped route. Fail2Ban bans IP addresses that trigger its filters by updating firewall rules to reject new connections. OpenSSL provides cryptographic and TLS functionality, while Nmap performs network discovery and scanning rather than blocking IP addresses.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!