iSACA Cybersecurity Fundamentals Certification Practice Exam

Which of the following is NOT a common issue faced by firewalls?

1. Configuration errors

2. Inability to track malicious attacks

3. Policy maintenance

4. Monitoring demands

The correct answer is: Inability to track malicious attacks

Firewalls are designed to filter and control incoming and outgoing network traffic based on predetermined security rules, and they can indeed track and log malicious attacks effectively. While they may not identify all types of attacks, particularly those that bypass traditional filtering or exploit legitimate traffic methods, their primary role includes the capacity to generate alerts or logs for potentially malicious activity. Configuration errors, policy maintenance, and monitoring demands are all well-known challenges in firewall management. Configuration errors can arise from incorrect rule settings, which can lead to vulnerabilities. Policy maintenance relates to the need for regular updates to the security policies applied to the firewall, requiring careful management as organizational needs evolve. Monitoring demands refer to the necessity of continuous oversight of firewall performance and traffic, keeping an eye on alerts and logs to ensure that the firewall is functioning as intended and is effective against threats. Thus, the statement regarding the inability of firewalls to track malicious attacks does not accurately reflect the capabilities of firewalls, making it the option that is less aligned with common issues they face.