CREST Practitioner Security Analyst (CPSA) Practice

What is the purpose of egress filtering?

1. Filtering incoming traffic

2. Filtering outbound traffic

3. Controlling web server access

4. Preventing malware from entering a network

The correct answer is: Filtering outbound traffic

Egress filtering focuses on monitoring and controlling outbound traffic from a network. The primary purpose of egress filtering is to enhance security by ensuring that only legitimate traffic is allowed to leave the network, preventing sensitive data from being exfiltrated and stopping malicious traffic from spreading further into the internet. This process is vital in guarding against various cyber threats, such as data breaches or unauthorized data transmission by insiders or compromised systems. By applying specific rules and policies to outgoing traffic, organizations can detect unusual patterns, identify potential data leaks, and mitigate risks associated with compromised devices. Considering this context, egress filtering plays a critical role in maintaining data integrity and confidentiality within the network ecosystem.