Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA CS0-003 Exam - Topic 4 Question 44 Discussion

A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?
A) Geoblock the offending source country
B) Block the IP range of the scans at the network firewall.
C) Perform a historical trend analysis and look for similar scanning activity.
D) Block the specific IP address of the scans at the network firewall

CompTIA CS0-003 Exam - Topic 4 Question 44 Discussion

Actual exam question for CompTIA's CS0-003 exam
Question #: 44
Topic #: 4
[All CS0-003 Questions]

A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?

Show Suggested Answer Hide Answer
Suggested Answer: A

Geoblocking is the best mitigation technique for unusual network scanning activity coming from a country that the company does not do business with, as it can prevent any potential attacks or data breaches from that country. Geoblocking is the practice of restricting access to websites or services based on geographic location, usually by blocking IP addresses associated with a certain country or region. Geoblocking can help reduce the overall attack surface and protect against malicious actors who may be trying to exploit vulnerabilities or steal information. The other options are not as effective as geoblocking, as they may not block all the possible sources of the scanning activity, or they may not address the root cause of the problem. Official Reference:

https://www.blumira.com/geoblocking/

https://www.avg.com/en/signal/geo-blocking


by Josphine at Jun 12, 2025, 05:41 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Precious
7 months ago
Totally agree with blocking the IP range!
upvoted 0 times
...
Muriel
7 months ago
I think blocking the specific IP is more effective.
upvoted 0 times
...
Laurel
7 months ago
Geoblocking is a solid first step!
upvoted 0 times
...
Kenny
7 months ago
Historical trend analysis sounds like overkill for this.
upvoted 0 times
...
Shaun
7 months ago
Wait, can we really trust geoblocking to work?
upvoted 0 times
...
Janna
8 months ago
I practiced a similar question where blocking the IP range was suggested, but I'm not confident if that's the right move here either.
upvoted 0 times
...
Carolynn
8 months ago
I feel like performing a historical trend analysis could help us understand if this is a recurring issue, but it doesn't stop the current threat.
upvoted 0 times
...
Tambra
8 months ago
I think blocking the specific IP address could be effective, but what if the attacker changes their IP? That seems risky.
upvoted 0 times
...
Arlen
8 months ago
I remember we discussed geoblocking in class, but I'm not sure if it's the best option here since it might block legitimate traffic too.
upvoted 0 times
...
Meaghan
9 months ago
I feel pretty confident about this one. Blocking the IP range of the scans at the firewall seems like the most targeted and effective approach to stop the activity right away.
upvoted 0 times
...
Markus
9 months ago
Performing a historical trend analysis could provide some useful context, but I'm not sure that's the best immediate mitigation step. I think I'll focus on the options that directly address the scanning activity.
upvoted 0 times
...
Dalene
9 months ago
I'm a bit confused here. Wouldn't blocking the specific IP address or IP range be more effective than just geoblocking the country? I want to make sure I'm choosing the most robust solution.
upvoted 0 times
...
Ciara
9 months ago
Okay, I've got this. Geoblocking the offending country is definitely the way to go - that will shut down the scans at the source.
upvoted 0 times
...
Verdell
9 months ago
Hmm, this seems like a tricky one. I'll need to think through the options carefully to determine the best mitigation technique.
upvoted 0 times
...
Reyes
11 months ago
I'd go with option D. Keep it simple - just block the IPs and be done with it. No need to overthink this, right?
upvoted 0 times
...
Ronald
11 months ago
Haha, I bet the hackers are just laughing at us trying to block their IP addresses. They've probably got a million more where that came from!
upvoted 0 times
Lorenza
10 months ago
User 1: We should geoblock the country, that way we can stop all their scanning activity.
upvoted 0 times
...
...
Isaiah
12 months ago
Performing a trend analysis is a great idea! We can't just react to the current situation - we need to understand the bigger picture and plan for the future.
upvoted 0 times
Jenelle
10 months ago
Blocking the specific IP address at the firewall could also help stop the scanning activity.
upvoted 0 times
...
Shawana
11 months ago
Yes, I agree. We need to be proactive in our approach to cybersecurity.
upvoted 0 times
...
Louisa
11 months ago
C) Perform a historical trend analysis and look for similar scanning activity.
upvoted 0 times
...
Hailey
11 months ago
A) Geoblock the offending source country
upvoted 0 times
...
Deja
11 months ago
User 2: No, we should perform a trend analysis first.
upvoted 0 times
...
Nicholle
11 months ago
User 1: Let's geoblock the country!
upvoted 0 times
...
...
Brynn
1 year ago
Blocking the specific IP addresses is a good start, but what if they just use a different IP? Blocking the whole range is a more comprehensive solution.
upvoted 0 times
Corinne
11 months ago
User 3: Performing historical trend analysis could help us identify similar scanning activity in the past.
upvoted 0 times
...
Olive
11 months ago
User 2: Blocking the specific IP addresses might not be enough, we should block the whole IP range.
upvoted 0 times
...
Deangelo
11 months ago
User 1: We should geoblock the country where the scans are coming from.
upvoted 0 times
...
...
Shaun
1 year ago
I think performing a historical trend analysis and looking for similar scanning activity would be the best approach to understand the threat better.
upvoted 0 times
...
Polly
1 year ago
Geoblocking the offending country seems like the most effective way to stop the scans. Why risk letting them in when we can just shut the door?
upvoted 0 times
Chana
12 months ago
B) Block the IP range of the scans at the network firewall.
upvoted 0 times
...
Odette
1 year ago
A) Geoblock the offending source country
upvoted 0 times
...
...
Youlanda
1 year ago
I disagree, I believe blocking the IP range of the scans at the network firewall would be more effective.
upvoted 0 times
...
Nan
1 year ago
I think the best mitigation technique would be to geoblock the offending source country.
upvoted 0 times
...

Save Cancel