300-910 · Question #7
Which two options are advantages of an application layer firewall? (Choose two.)
The correct answer is B. makes DoS attacks difficult E. authenticates individuals. Application layer firewalls provide enhanced security by understanding application-specific protocols, which helps in mitigating DoS attacks and enabling user authentication.
Question
Options
- Aprovides high-performance filtering
- Bmakes DoS attacks difficult
- Csupports a large number of applications
- Dauthenticates devices
- Eauthenticates individuals
How the community answered
(24 responses)- B92% (22)
- C4% (1)
- D4% (1)
Why each option
Application layer firewalls provide enhanced security by understanding application-specific protocols, which helps in mitigating DoS attacks and enabling user authentication.
Application layer firewalls perform deep packet inspection, which is computationally intensive and generally leads to *lower* performance compared to stateless or stateful packet filtering firewalls.
Application layer firewalls inspect traffic at layer 7 (the application layer), understanding the context of applications and their protocols. This deeper inspection allows them to detect and block malicious requests, making denial-of-service (DoS) attacks more difficult to execute effectively.
While application layer firewalls support specific applications, their deep inspection capabilities often limit the *number* of unique applications they can efficiently monitor and protect without significant configuration or performance impact.
Authenticating devices is typically handled at lower layers or by endpoint security solutions, rather than being a primary advantage of an application layer firewall.
Because application layer firewalls operate at a higher level, they can integrate with authentication systems to authenticate individual users based on application-specific credentials or directory services, providing granular access control beyond just IP addresses or ports.
Concept tested: Application Layer Firewall benefits
Source: https://www.fortinet.com/resources/cyberglossary/application-firewall
Topics
Community Discussion
No community discussion yet for this question.