312-50V9 · Question #77
One advantage of an application-level firewall is the ability to
The correct answer is B. filter specific commands, such as http:post. Application-level firewalls operate at Layer 7 and can inspect and filter specific application protocol commands, such as blocking HTTP POST requests, which lower-layer firewalls cannot do.
Question
One advantage of an application-level firewall is the ability to
Options
- Afilter packets at the network level.
- Bfilter specific commands, such as http:post.
- Cretain state information for each packet.
- Dmonitor tcp handshaking.
How the community answered
(32 responses)- A3% (1)
- B94% (30)
- D3% (1)
Why each option
Application-level firewalls operate at Layer 7 and can inspect and filter specific application protocol commands, such as blocking HTTP POST requests, which lower-layer firewalls cannot do.
Filtering packets at the network level is the function of a packet-filtering firewall operating at Layer 3, not an application-level firewall.
Application-level firewalls (also called proxy firewalls) understand the full application protocol, allowing them to parse and enforce rules on specific commands like HTTP GET, HTTP POST, or FTP PUT. This deep protocol awareness is their defining advantage over packet-filtering and stateful firewalls. Blocking or allowing discrete commands within a protocol is only possible when the firewall operates at the application layer.
Retaining state information for each packet describes a stateful inspection firewall, which tracks TCP session state at the transport layer rather than the application layer.
Monitoring TCP handshaking is a transport-layer function associated with stateful firewalls, not a distinguishing capability of application-level firewalls.
Concept tested: Application-layer firewall protocol command filtering
Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.