nerdexam
EC-Council

312-50V11 · Question #26

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types…

The correct answer is D. Web application firewall. A Web Application Firewall (WAF) inspects HTTP/HTTPS traffic at the application layer and can detect and block SQL injection payloads. Other firewall types operate below the application layer and cannot parse query content.

Evading IDS, Firewalls, and Honeypots

Question

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

Options

  • AData-driven firewall
  • BStateful firewall
  • CPacket firewall
  • DWeb application firewall

How the community answered

(37 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    95% (35)

Why each option

A Web Application Firewall (WAF) inspects HTTP/HTTPS traffic at the application layer and can detect and block SQL injection payloads. Other firewall types operate below the application layer and cannot parse query content.

AData-driven firewall

A data-driven firewall dynamically adjusts rules based on traffic behavior but is not specifically designed to parse and block SQL injection syntax within HTTP payloads.

BStateful firewall

A stateful firewall tracks TCP/IP connection state at Layers 3 and 4 but has no visibility into HTTP request content or SQL syntax.

CPacket firewall

A packet firewall filters traffic based on IP addresses, ports, and protocols at Layer 3/4 and cannot inspect application-layer data for SQL injection patterns.

DWeb application firewallCorrect

A Web Application Firewall operates at OSI Layer 7 (application layer) and analyzes the content of HTTP requests, including query parameters, form fields, and headers. This allows it to identify and block SQL injection patterns such as UNION SELECT or OR 1=1 before they reach the database, which packet and stateful firewalls cannot do because they do not inspect application-layer payloads.

Concept tested: Web Application Firewall protection against SQL injection

Source: https://owasp.org/www-community/Web_Application_Firewall

Topics

#web application firewall#WAF#firewall types#SQL injection protection

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V11 Practice