nerdexam
Novell

050-696 · Question #162

Which firewall intercepts information running through a gateway and accepts only packets that are generated by a specific protocol such as FTP or SMTP?

The correct answer is C. Application Proxy. An application proxy firewall operates at the application layer, inspecting traffic for specific protocols like FTP or SMTP and acting as an intermediary between clients and servers.

Network Services (DNS, DHCP, NTP)

Question

Which firewall intercepts information running through a gateway and accepts only packets that are generated by a specific protocol such as FTP or SMTP?

Options

  • ACaching Proxy
  • BPacket Filtering
  • CApplication Proxy
  • DCircuit-Level Gateway
  • ENetwork Address Translation

How the community answered

(44 responses)
  • A
    14% (6)
  • B
    9% (4)
  • C
    70% (31)
  • D
    5% (2)
  • E
    2% (1)

Why each option

An application proxy firewall operates at the application layer, inspecting traffic for specific protocols like FTP or SMTP and acting as an intermediary between clients and servers.

ACaching Proxy

A Caching Proxy stores copies of frequently accessed content to improve performance, but does not filter packets based on protocol compliance at the gateway level.

BPacket Filtering

Packet Filtering firewalls examine packets based on source/destination IP addresses, ports, and protocols at the network layer, but do not perform deep application-layer protocol inspection.

CApplication ProxyCorrect

An Application Proxy (also called an application-layer gateway) intercepts all traffic passing through it and evaluates packets based on specific application-layer protocols such as FTP, SMTP, or HTTP. It acts as a relay, accepting connections from clients and making separate connections to destination servers, ensuring only protocol-compliant traffic is allowed through.

DCircuit-Level Gateway

A Circuit-Level Gateway operates at the session layer and validates TCP/UDP sessions, but does not inspect the content or enforce application-specific protocol rules.

ENetwork Address Translation

Network Address Translation (NAT) translates private IP addresses to public ones and vice versa, providing a degree of obscurity, but is not a firewall mechanism for protocol-based packet acceptance.

Concept tested: Application proxy firewall protocol-level traffic filtering

Source: https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/16138-pix-ftp.html

Topics

#application proxy#firewall types#protocol filtering#gateway security

Community Discussion

No community discussion yet for this question.

Full 050-696 Practice