212-82 · Question #131
A large multinational corporation is In the process of upgrading its network infrastructure to enhance security and protect sensitive data. As part of the upgrade, the IT team is considering…
The correct answer is B. Stateful multilayer inspection firewalls track and maintain session information between hosts, while. Stateful multilayer inspection firewalls track session information and inspect up to Layer 4, whereas application-level gateway firewalls act as proxies, inspecting traffic at Layer 7.
Question
A large multinational corporation is In the process of upgrading its network infrastructure to enhance security and protect sensitive data. As part of the upgrade, the IT team is considering implementing stateful multilayer inspection firewalls and application-level gateway firewalls. How do stateful multilayer inspection firewalls differ from application-level gateway firewalls in terms of their packet filtering capabilities and the layers of the OSI model they inspect?
Options
- AStateful multilayer inspection firewalls are more expensive and require competent personnel to
- BStateful multilayer inspection firewalls track and maintain session information between hosts, while
- CStateful multilayer inspection firewalls focus on inspecting packets at the application layer, while
- DStateful multilayer inspection firewalls filter traffic based on specified application rules,
How the community answered
(63 responses)- A2% (1)
- B94% (59)
- C3% (2)
- D2% (1)
Why each option
Stateful multilayer inspection firewalls track session information and inspect up to Layer 4, whereas application-level gateway firewalls act as proxies, inspecting traffic at Layer 7.
This statement describes aspects like cost and personnel requirements, which are not technical distinctions concerning packet filtering capabilities or OSI layers of operation.
Stateful multilayer inspection firewalls operate by tracking and maintaining the state of network connections between hosts, inspecting traffic primarily up to Layer 4 (Transport Layer) of the OSI model to ensure valid session establishment. In contrast, application-level gateway firewalls, also known as proxy firewalls, establish separate connections for each direction of traffic, allowing them to perform deep packet inspection and make filtering decisions based on the content and rules of specific application protocols at Layer 7 (Application Layer).
This is incorrect; stateful multilayer inspection firewalls primarily inspect at Layer 3 and 4, tracking connection states, while application-layer inspection is a characteristic of application-level gateway firewalls.
This is incorrect; stateful multilayer inspection firewalls primarily focus on connection states and basic protocol compliance at lower layers, while filtering traffic based on specified application rules is a function of application-level gateways or next-generation firewalls.
Concept tested: Firewall types and OSI layer inspection
Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/firewall-guidance
Topics
Community Discussion
No community discussion yet for this question.