mediumMultiple ChoiceObjective-mapped
220-1102 Practice Question: A company policy requires that all web traffic be…
A company policy requires that all web traffic be filtered to block known malicious sites. You need to implement this on the network without installing software on each client. What should you configure?
⚠ Common exam trap
A common trap on the CompTIA A+ exam is confusing host-based and network-based security controls. Candidates may choose a host-based solution (like firewall or browser settings) instead of recognizing that DNS filtering is a network-level, agentless method that meets the 'no client software' constraint.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a DNS filtering service on the router or DNS server
A DNS filtering service works at the network level by resolving domain names against a blocklist of known malicious sites. By configuring this on the router or DNS server, all client traffic is filtered transparently without requiring any software installation on individual workstations, which satisfies the policy requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Windows Defender Firewall on each workstation
Why it's wrong here
Enabling Windows Defender Firewall on each workstation primarily controls network traffic based on ports, protocols, and IP addresses, acting as a host-based packet filter. While it can block specific applications or restrict network access, it lacks the capability to filter web content based on domain reputation, category, or company policy for specific websites. This approach would require extensive manual configuration on each machine and would not effectively enforce a centralized web traffic policy.
- ✓
Configure a DNS filtering service on the router or DNS server
Why this is correct
Configuring a DNS filtering service on the router or a dedicated DNS server is the most effective and scalable solution for enforcing company web traffic policies. This service intercepts DNS requests, resolving known malicious or policy-violating domains to a block page or non-existent IP address before the connection can even be established. By centralizing this control, all devices on the network automatically adhere to the policy without individual client configuration, making it difficult for users to bypass.
- ✗
Install a browser extension on all computers
Why it's wrong here
Installing a browser extension on all computers is an impractical and easily circumvented method for enforcing a company-wide web traffic policy. Each extension would need to be individually installed and managed on every client machine, creating significant administrative overhead. Furthermore, users can often disable, uninstall, or bypass browser extensions by using a different browser or incognito mode, rendering the policy ineffective and inconsistent across the organization.
- ✗
Set the browser security level to high
Why it's wrong here
Setting the browser security level to high primarily restricts the execution of active content, such as JavaScript, ActiveX controls, or pop-ups, to mitigate client-side vulnerabilities. While it can prevent some forms of malicious code from running, it does not inherently filter web traffic based on domain reputation, content categories, or a company's specific list of prohibited websites. This setting often leads to legitimate websites breaking functionality and does not provide centralized policy enforcement.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.