Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to o

The correct answer is C. Application-level proxy firewall. An application-level proxy firewall (also called an application gateway) operates at Layer 7 (Application Layer) of the OSI model. It understands application-specific protocols and can inspect the actual commands within a protocol session. This allows it to permit FTP traffic in

Submitted by haruto_sh· Apr 18, 2026Network Forensics

Question

Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to only allow FTP-PUT. Which firewall would be most appropriate for Harold? needs?

Options

APacket filtering firewall
BCircuit-level proxy firewall
CApplication-level proxy firewall
DData link layer firewall

How the community answered

(47 responses)

A
11% (5)
B
6% (3)
C
81% (38)
D
2% (1)

Explanation

An application-level proxy firewall (also called an application gateway) operates at Layer 7 (Application Layer) of the OSI model. It understands application-specific protocols and can inspect the actual commands within a protocol session. This allows it to permit FTP traffic in general but restrict it to only the PUT command, blocking GET, LIST, DELETE, and other FTP commands. A packet filtering firewall only examines IP/port headers and cannot distinguish between FTP commands. A circuit-level proxy firewall operates at the session layer and verifies handshakes but does not inspect application-layer content. A data link layer firewall operates too low in the stack to parse application commands.

Topics

#Firewall types#Application-level proxy#Network security controls#FTP traffic filtering

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice