What does Host-Based Firewall do?

• A. Encrypts data at rest.
• B. Accepts or drops packets based on the application or port being targeted by the inbound.
• C. Logs all user activity to a central server.
• D. Detects anomalies in user behavior.

Answer: (B)

A host-based firewall runs on the endpoint and filters traffic to and from that device. It enforces rules that decide whether inbound packets are allowed or dropped based on the destination port or the application requesting the connection. This per-host filtering is what the firewall does best, providing protection even if the network perimeter isn’t blocking that traffic. While some host-based firewalls can also regulate outbound connections, the core idea is controlling traffic by application or port for that host.

Encrypting data at rest is about protecting stored data, not filtering network traffic. Logging all user activity to a central server is a monitoring/auditing function, not a firewall action. Detecting anomalies in user behavior is anomaly detection or UEBA, not firewall filtering.