312-50V11 · Question #304
One advantage of an application-level firewall is the ability to
The correct answer is B. filter specific commands, such as http:post. Application-level firewalls operate at Layer 7 and can inspect and filter specific application protocol commands such as HTTP POST.
Question
One advantage of an application-level firewall is the ability to
Options
- Afilter packets at the network level.
- Bfilter specific commands, such as http:post.
- Cretain state information for each packet.
- Dmonitor tcp handshaking.
How the community answered
(37 responses)- B86% (32)
- C8% (3)
- D5% (2)
Why each option
Application-level firewalls operate at Layer 7 and can inspect and filter specific application protocol commands such as HTTP POST.
Filtering packets at the network level is the function of a packet-filtering firewall operating at Layer 3, not an application-level firewall.
Application-level firewalls (proxy firewalls) have full visibility into Layer 7 traffic, enabling them to parse and enforce rules on specific application commands like HTTP GET, POST, or PUT. This deep protocol awareness is the defining capability that separates them from packet-filtering and stateful firewalls, allowing administrators to block individual dangerous operations within otherwise permitted protocols.
Retaining per-connection state information is the defining characteristic of stateful inspection firewalls, not specifically application-level firewalls.
Monitoring TCP handshaking (SYN, SYN-ACK, ACK sequences) is a transport-layer capability of stateful firewalls, not a Layer 7 application firewall feature.
Concept tested: Application-layer firewall protocol command filtering
Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.