312-50V10 · Question #305
Which of the statements concerning proxy firewalls is correct?
The correct answer is D. Computers establish a connection with a proxy firewall which initiates a new network connection. A proxy firewall intercepts client connections and creates a new, separate connection to the destination on the client's behalf, acting as an intermediary.
Question
Which of the statements concerning proxy firewalls is correct?
Options
- AProxy firewalls increase the speed and functionality of a network.
- BFirewall proxy servers decentralize all activity for an application.
- CProxy firewalls block network packets from passing to and from a protected network.
- DComputers establish a connection with a proxy firewall which initiates a new network connection
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- D92% (23)
Why each option
A proxy firewall intercepts client connections and creates a new, separate connection to the destination on the client's behalf, acting as an intermediary.
Proxy firewalls introduce processing overhead for proxying each connection, which typically decreases network speed rather than increasing it.
Proxy firewalls centralize all application traffic through a single inspection point, which is the opposite of decentralizing activity.
Blocking network packets from passing is the behavior of a packet-filtering firewall, not a proxy firewall, which instead relays traffic through a new connection rather than simply blocking or forwarding raw packets.
When a client connects to a proxy firewall, the firewall terminates that connection and then initiates a brand-new network connection to the intended destination server. This two-connection model hides internal network topology, allows content inspection, and prevents direct IP-level communication between the client and the external server.
Concept tested: Proxy firewall connection intermediary behavior
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.