CompTIA CS0-003 Exam - Topic 4 Question 44 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 44
Topic #: 4

A cybersecurity analyst notices unusual network scanning activity coming from a country that the company does not do business with. Which of the following is the best mitigation technique?

AGeoblock the offending source country

BBlock the IP range of the scans at the network firewall.

CPerform a historical trend analysis and look for similar scanning activity.

DBlock the specific IP address of the scans at the network firewall

Show Suggested Answer

Suggested Answer: A

Geoblocking is the best mitigation technique for unusual network scanning activity coming from a country that the company does not do business with, as it can prevent any potential attacks or data breaches from that country. Geoblocking is the practice of restricting access to websites or services based on geographic location, usually by blocking IP addresses associated with a certain country or region. Geoblocking can help reduce the overall attack surface and protect against malicious actors who may be trying to exploit vulnerabilities or steal information. The other options are not as effective as geoblocking, as they may not block all the possible sources of the scanning activity, or they may not address the root cause of the problem. Official Reference:

https://www.blumira.com/geoblocking/

https://www.avg.com/en/signal/geo-blocking

by Josphine at Jun 12, 2025, 05:41 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Precious

2 months ago

Totally agree with blocking the IP range!

upvoted 0 times

...

Muriel

2 months ago

I think blocking the specific IP is more effective.

upvoted 0 times

...

Laurel

2 months ago

Geoblocking is a solid first step!

upvoted 0 times

...

Kenny

3 months ago

Historical trend analysis sounds like overkill for this.

upvoted 0 times

...

Shaun

3 months ago

Wait, can we really trust geoblocking to work?

upvoted 0 times

...

Janna

3 months ago

I practiced a similar question where blocking the IP range was suggested, but I'm not confident if that's the right move here either.

upvoted 0 times

...

Carolynn

3 months ago

I feel like performing a historical trend analysis could help us understand if this is a recurring issue, but it doesn't stop the current threat.

upvoted 0 times

...

Tambra

4 months ago

I think blocking the specific IP address could be effective, but what if the attacker changes their IP? That seems risky.

upvoted 0 times

...

Arlen

4 months ago

I remember we discussed geoblocking in class, but I'm not sure if it's the best option here since it might block legitimate traffic too.

upvoted 0 times

...

Meaghan

4 months ago

I feel pretty confident about this one. Blocking the IP range of the scans at the firewall seems like the most targeted and effective approach to stop the activity right away.

upvoted 0 times

...

Markus

4 months ago

Performing a historical trend analysis could provide some useful context, but I'm not sure that's the best immediate mitigation step. I think I'll focus on the options that directly address the scanning activity.

upvoted 0 times

...

Dalene

4 months ago

I'm a bit confused here. Wouldn't blocking the specific IP address or IP range be more effective than just geoblocking the country? I want to make sure I'm choosing the most robust solution.

upvoted 0 times

...

Ciara

5 months ago

Okay, I've got this. Geoblocking the offending country is definitely the way to go - that will shut down the scans at the source.

upvoted 0 times

...

Verdell

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the options carefully to determine the best mitigation technique.

upvoted 0 times

...

Reyes

7 months ago

I'd go with option D. Keep it simple - just block the IPs and be done with it. No need to overthink this, right?

upvoted 0 times

...

Ronald

7 months ago

Haha, I bet the hackers are just laughing at us trying to block their IP addresses. They've probably got a million more where that came from!

upvoted 0 times

Lorenza

5 months ago

User 1: We should geoblock the country, that way we can stop all their scanning activity.

upvoted 0 times

...

Isaiah

7 months ago

Performing a trend analysis is a great idea! We can't just react to the current situation - we need to understand the bigger picture and plan for the future.

upvoted 0 times

Jenelle

5 months ago

Blocking the specific IP address at the firewall could also help stop the scanning activity.

upvoted 0 times

...

Shawana

6 months ago

Yes, I agree. We need to be proactive in our approach to cybersecurity.

upvoted 0 times

...

Louisa

6 months ago

C) Perform a historical trend analysis and look for similar scanning activity.

upvoted 0 times

...

Hailey

7 months ago

A) Geoblock the offending source country

upvoted 0 times

...

Deja

7 months ago

User 2: No, we should perform a trend analysis first.

upvoted 0 times

...

Nicholle

7 months ago

User 1: Let's geoblock the country!

upvoted 0 times

...

Brynn

8 months ago

Blocking the specific IP addresses is a good start, but what if they just use a different IP? Blocking the whole range is a more comprehensive solution.

upvoted 0 times