FC0-U71 Security Practice Question
What is the primary purpose of a firewall?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To prevent unauthorized network access
A firewall controls incoming and outgoing network traffic based on predetermined security rules. It filters traffic by port, protocol, or IP address to block unauthorized access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To encrypt data on the hard drive
Why it's wrong here
A firewall inspects and filters network packets against rule sets to permit or deny traffic between zones; full-disk encryption is performed by BitLocker or similar tooling, not by a firewall. It is tempting because both are security controls, and a firewall would be correct if the requirement were controlling inbound and outbound network connections.
- ✗
To detect and remove viruses
Why it's wrong here
A firewall permits or denies network traffic by inspecting packet headers and state; signature-based scanning and quarantine of malicious code is antivirus or endpoint detection and response software. It is tempting because both defend the network, and a firewall would be correct if the scenario required filtering or blocking unauthorised network connections.
- ✓
To prevent unauthorized network access
Why this is correct
A firewall inspects incoming and outgoing traffic against configured rules, permitting or blocking packets based on source, destination, port and protocol. This filtering enforces the boundary between trusted and untrusted networks, directly fulfilling the stem's stated purpose of preventing unauthorised network access.
- ✗
To manage user passwords
Why it's wrong here
Managing user passwords belongs to identity providers such as Microsoft Entra ID, not a firewall, which filters network traffic by rules on addresses, ports and protocols. The option tempts because password management is a genuine security function, and it would be the right answer if the question asked about authentication or directory services rather than perimeter traffic control.
Visual reference
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on FC0-U71
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. What is the primary purpose of a network firewall?
easy- A.To prevent malware infections by scanning files
- B.To encrypt data transmitted over the network
- ✓ C.To block unauthorized network traffic based on rules
- D.To provide wireless network access
Why C: A network firewall's primary purpose is to control incoming and outgoing network traffic by comparing packets against a set of predefined security rules. It acts as a barrier between trusted internal networks and untrusted external networks (like the internet), allowing or denying traffic based on criteria such as IP addresses, ports, and protocols. This rule-based filtering is the core function that distinguishes a firewall from other security tools.
Variation 2. A company wants to protect its network from unauthorized external access. Which of the following devices should be configured to filter traffic based on port and protocol?
medium- ✓ A.Network firewall
- B.Host-based firewall
- C.VPN concentrator
- D.Antivirus software
Why A: A network firewall is specifically designed to inspect and filter traffic traversing the network perimeter based on rules that match port numbers, protocols (TCP/UDP/ICMP), and source/destination IP addresses. It sits between the internal network and external networks, making it the correct device to block unauthorized external access at the network boundary.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.