CompTIA Security Plus Mock Test Q472

A company hosts its public websites internally. The administrator would like to make some changes to the architecture. The three goals are:
reduce the number of public IP addresses in use by the web servers drive all the web traffic through a central point of control mitigate automated attacks that are based on IP address scanning
Which of the following would meet all three goals?

A. Firewall
B. Load balancer
C. URL filter
D. Reverse proxy

Correct Answer: D
Section: Compliance and Operational Security

The purpose of a proxy server is to serve as a proxy or middle man between clients and servers. Using a reverse proxy you will be able to meet the three stated goals.

Incorrect Answers:
A: A firewall can be used to provide protection by controlling traffic entering and leaving the network, but not all the stated goals in the question.
B: Load balancers are used to spread the network traffic load across several links and devices so as to prevent bottlenecks from forming. This is only part of the goals that will be met.
C: A URL filter is used to block access to a site based on all or even just a part of the URL that is used to request the access. Thus a URL filter can meet the goal of mitigating automated attacks that are based on IP address scanning, but not all the goals.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 11, 19, 178