312-50V9 · Question #78
Which of the statements concerning proxy firewalls is correct?
The correct answer is D. Computers establish a connection with a proxy firewall which initiates a new network connection. Proxy firewalls act as intermediaries by accepting a client connection and then initiating a separate, new connection to the destination on the client's behalf.
Question
Which of the statements concerning proxy firewalls is correct?
Options
- AProxy firewalls increase the speed and functionality of a network.
- BFirewall proxy servers decentralize all activity for an application.
- CProxy firewalls block network packets from passing to and from a protected network.
- DComputers establish a connection with a proxy firewall which initiates a new network connection
How the community answered
(47 responses)- B4% (2)
- C2% (1)
- D94% (44)
Why each option
Proxy firewalls act as intermediaries by accepting a client connection and then initiating a separate, new connection to the destination on the client's behalf.
Proxy firewalls introduce processing overhead for each connection because they must terminate and re-initiate connections, which reduces rather than increases network speed.
Proxy firewalls centralize application activity through a single intermediary point of control, they do not decentralize it.
Blocking network packets from passing directly describes a packet-filtering firewall, whereas proxy firewalls forward traffic by proxying it through new connections rather than simply dropping packets.
A proxy firewall terminates the inbound client connection and establishes a brand-new outbound connection to the target server, so the two endpoints never communicate directly. This two-connection model allows the proxy to fully inspect and filter application-layer content before forwarding it. This behavior is the defining characteristic that distinguishes proxy firewalls from packet-filtering and stateful inspection firewalls.
Concept tested: Proxy firewall connection intermediary behavior
Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.