Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA CS0-003 Exam - Topic 4 Question 44 Discussion

A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?
A) Geoblock the offending source country
B) Block the IP range of the scans at the network firewall.
C) Perform a historical trend analysis and look for similar scanning activity.
D) Block the specific IP address of the scans at the network firewall

CompTIA CS0-003 Exam - Topic 4 Question 44 Discussion

Actual exam question for CompTIA's CS0-003 exam
Question #: 44
Topic #: 4
[All CS0-003 Questions]

A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?

Show Suggested Answer Hide Answer
Suggested Answer: A

Geoblocking is the best mitigation technique for unusual network scanning activity coming from a country that the company does not do business with, as it can prevent any potential attacks or data breaches from that country. Geoblocking is the practice of restricting access to websites or services based on geographic location, usually by blocking IP addresses associated with a certain country or region. Geoblocking can help reduce the overall attack surface and protect against malicious actors who may be trying to exploit vulnerabilities or steal information. The other options are not as effective as geoblocking, as they may not block all the possible sources of the scanning activity, or they may not address the root cause of the problem. Official Reference:

https://www.blumira.com/geoblocking/

https://www.avg.com/en/signal/geo-blocking


by Josphine at Jun 12, 2025, 05:41 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Precious
9 months ago
Totally agree with blocking the IP range!
upvoted 0 times
...
Muriel
9 months ago
I think blocking the specific IP is more effective.
upvoted 0 times
...
Laurel
9 months ago
Geoblocking is a solid first step!
upvoted 0 times
...
Kenny
9 months ago
Historical trend analysis sounds like overkill for this.
upvoted 0 times
...
Shaun
10 months ago
Wait, can we really trust geoblocking to work?
upvoted 0 times
...
Janna
10 months ago
I practiced a similar question where blocking the IP range was suggested, but I'm not confident if that's the right move here either.
upvoted 0 times
...
Carolynn
10 months ago
I feel like performing a historical trend analysis could help us understand if this is a recurring issue, but it doesn't stop the current threat.
upvoted 0 times
...
Tambra
10 months ago
I think blocking the specific IP address could be effective, but what if the attacker changes their IP? That seems risky.
upvoted 0 times
...
Arlen
11 months ago
I remember we discussed geoblocking in class, but I'm not sure if it's the best option here since it might block legitimate traffic too.
upvoted 0 times
...
Meaghan
11 months ago
I feel pretty confident about this one. Blocking the IP range of the scans at the firewall seems like the most targeted and effective approach to stop the activity right away.
upvoted 0 times
...
Markus
11 months ago
Performing a historical trend analysis could provide some useful context, but I'm not sure that's the best immediate mitigation step. I think I'll focus on the options that directly address the scanning activity.
upvoted 0 times
...
Dalene
11 months ago
I'm a bit confused here. Wouldn't blocking the specific IP address or IP range be more effective than just geoblocking the country? I want to make sure I'm choosing the most robust solution.
upvoted 0 times
...
Ciara
11 months ago
Okay, I've got this. Geoblocking the offending country is definitely the way to go - that will shut down the scans at the source.
upvoted 0 times
...
Verdell
11 months ago
Hmm, this seems like a tricky one. I'll need to think through the options carefully to determine the best mitigation technique.
upvoted 0 times
...
Reyes
1 year ago
I'd go with option D. Keep it simple - just block the IPs and be done with it. No need to overthink this, right?
upvoted 0 times
...
Ronald
1 year ago
Haha, I bet the hackers are just laughing at us trying to block their IP addresses. They've probably got a million more where that came from!
upvoted 0 times
Lorenza
12 months ago
User 1: We should geoblock the country, that way we can stop all their scanning activity.
upvoted 0 times
...
...
Isaiah
1 year ago
Performing a trend analysis is a great idea! We can't just react to the current situation - we need to understand the bigger picture and plan for the future.
upvoted 0 times
Jenelle
1 year ago
Blocking the specific IP address at the firewall could also help stop the scanning activity.
upvoted 0 times
...
Shawana
1 year ago
Yes, I agree. We need to be proactive in our approach to cybersecurity.
upvoted 0 times
...
Louisa
1 year ago
C) Perform a historical trend analysis and look for similar scanning activity.
upvoted 0 times
...
Hailey
1 year ago
A) Geoblock the offending source country
upvoted 0 times
...
Deja
1 year ago
User 2: No, we should perform a trend analysis first.
upvoted 0 times
...
Nicholle
1 year ago
User 1: Let's geoblock the country!
upvoted 0 times
...
...
Brynn
1 year ago
Blocking the specific IP addresses is a good start, but what if they just use a different IP? Blocking the whole range is a more comprehensive solution.
upvoted 0 times
Corinne
1 year ago
User 3: Performing historical trend analysis could help us identify similar scanning activity in the past.
upvoted 0 times
...
Olive
1 year ago
User 2: Blocking the specific IP addresses might not be enough, we should block the whole IP range.
upvoted 0 times
...
Deangelo
1 year ago
User 1: We should geoblock the country where the scans are coming from.
upvoted 0 times
...
...
Shaun
1 year ago
I think performing a historical trend analysis and looking for similar scanning activity would be the best approach to understand the threat better.
upvoted 0 times
...
Polly
1 year ago
Geoblocking the offending country seems like the most effective way to stop the scans. Why risk letting them in when we can just shut the door?
upvoted 0 times
Chana
1 year ago
B) Block the IP range of the scans at the network firewall.
upvoted 0 times
...
Odette
1 year ago
A) Geoblock the offending source country
upvoted 0 times
...
...
Youlanda
1 year ago
I disagree, I believe blocking the IP range of the scans at the network firewall would be more effective.
upvoted 0 times
...
Nan
1 year ago
I think the best mitigation technique would be to geoblock the offending source country.
upvoted 0 times
...

Save Cancel