CompTIA CySA+ Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the CySA+ Exam with our comprehensive test. Study using flashcards and multiple-choice questions that include hints and explanations to ensure your success. Get exam-ready today!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

When reviewing a firewall's logs while performing a vulnerability scan, which IP address indicates a connection attempt from an external source?

10.15.1.100
192.186.1.100
172.16.1.100
192.168.1.100

The correct answer is: 192.186.1.100

The answer indicating a connection attempt from an external source is valid because IP addresses generally fall into several designated ranges. The ranges specified by the Internet Engineering Task Force (IETF) for private IP addresses include: - 10.0.0.0 to 10.255.255.255 - 172.16.0.0 to 172.31.255.255 - 192.168.0.0 to 192.168.255.255 The address given in the answer, 192.186.1.100, falls outside these specified private address ranges. This means it is likely to be a public IP address, which can represent an external source on the internet attempting to connect to a system behind the firewall. In contrast, the other addresses mentioned are within the private address ranges. Consequently, these addresses are typically used within internal networks and would not indicate external connection attempts. Understanding these distinctions is essential in network security and monitoring, as they help identify the source and nature of connection attempts logged by firewall devices.