Which network security device blocks or allows traffic based on a set of rules?

Which network security device blocks or allows traffic based on a set of rules?

• A. IDS
• B. IPS
• C. VPN
• D. Firewall

Answer: (D)

Filtering traffic between networks by enforcing rules that permit or deny packets is the core idea here. A firewall sits at the network boundary and compares each packet against a set of security rules, deciding whether to allow or block it based on factors like source and destination IPs, ports, and protocols. This rule-based control is what keeps unwanted traffic out while letting legitimate communications through, making it the go-to device for enforcing access policies. An IDS monitors for malicious activity and alerts you when something suspicious is detected, but it doesn’t block traffic by itself. An IPS can block traffic, but its main role is intrusion prevention—looking for known attack patterns and stopping them—rather than serving as a general-purpose traffic-filtering gate. A VPN creates secure, encrypted tunnels for remote connections rather than filtering traffic based on access rules.

Filtering traffic between networks by enforcing rules that permit or deny packets is the core idea here. A firewall sits at the network boundary and compares each packet against a set of security rules, deciding whether to allow or block it based on factors like source and destination IPs, ports, and protocols. This rule-based control is what keeps unwanted traffic out while letting legitimate communications through, making it the go-to device for enforcing access policies.

An IDS monitors for malicious activity and alerts you when something suspicious is detected, but it doesn’t block traffic by itself. An IPS can block traffic, but its main role is intrusion prevention—looking for known attack patterns and stopping them—rather than serving as a general-purpose traffic-filtering gate. A VPN creates secure, encrypted tunnels for remote connections rather than filtering traffic based on access rules.