CompTIA CySA+ Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the CompTIA CySA+ Exam with our quizzes. Master essential cybersecurity skills with flashcards and multiple-choice questions, complete with hints and explanations to optimize your learning experience.

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

When reviewing a firewall's logs while performing a vulnerability scan, which IP address indicates a connection attempt from an external source?

10.15.1.100
192.186.1.100
172.16.1.100
192.168.1.100

The correct answer is: 192.186.1.100

The answer indicating a connection attempt from an external source is valid because IP addresses generally fall into several designated ranges. The ranges specified by the Internet Engineering Task Force (IETF) for private IP addresses include: - 10.0.0.0 to 10.255.255.255 - 172.16.0.0 to 172.31.255.255 - 192.168.0.0 to 192.168.255.255 The address given in the answer, 192.186.1.100, falls outside these specified private address ranges. This means it is likely to be a public IP address, which can represent an external source on the internet attempting to connect to a system behind the firewall. In contrast, the other addresses mentioned are within the private address ranges. Consequently, these addresses are typically used within internal networks and would not indicate external connection attempts. Understanding these distinctions is essential in network security and monitoring, as they help identify the source and nature of connection attempts logged by firewall devices.