050-696 · Question #162
Which firewall intercepts information running through a gateway and accepts only packets that are generated by a specific protocol such as FTP or SMTP?
The correct answer is C. Application Proxy. An application proxy firewall operates at the application layer, inspecting traffic for specific protocols like FTP or SMTP and acting as an intermediary between clients and servers.
Question
Options
- ACaching Proxy
- BPacket Filtering
- CApplication Proxy
- DCircuit-Level Gateway
- ENetwork Address Translation
How the community answered
(44 responses)- A14% (6)
- B9% (4)
- C70% (31)
- D5% (2)
- E2% (1)
Why each option
An application proxy firewall operates at the application layer, inspecting traffic for specific protocols like FTP or SMTP and acting as an intermediary between clients and servers.
A Caching Proxy stores copies of frequently accessed content to improve performance, but does not filter packets based on protocol compliance at the gateway level.
Packet Filtering firewalls examine packets based on source/destination IP addresses, ports, and protocols at the network layer, but do not perform deep application-layer protocol inspection.
An Application Proxy (also called an application-layer gateway) intercepts all traffic passing through it and evaluates packets based on specific application-layer protocols such as FTP, SMTP, or HTTP. It acts as a relay, accepting connections from clients and making separate connections to destination servers, ensuring only protocol-compliant traffic is allowed through.
A Circuit-Level Gateway operates at the session layer and validates TCP/UDP sessions, but does not inspect the content or enforce application-specific protocol rules.
Network Address Translation (NAT) translates private IP addresses to public ones and vice versa, providing a degree of obscurity, but is not a firewall mechanism for protocol-based packet acceptance.
Concept tested: Application proxy firewall protocol-level traffic filtering
Source: https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/16138-pix-ftp.html
Topics
Community Discussion
No community discussion yet for this question.