nerdexam
EC-Council

312-50V9 · Question #78

Which of the statements concerning proxy firewalls is correct?

The correct answer is D. Computers establish a connection with a proxy firewall which initiates a new network connection. Proxy firewalls act as intermediaries by accepting a client connection and then initiating a separate, new connection to the destination on the client's behalf.

Evading IDS, Firewalls, and Honeypots

Question

Which of the statements concerning proxy firewalls is correct?

Options

  • AProxy firewalls increase the speed and functionality of a network.
  • BFirewall proxy servers decentralize all activity for an application.
  • CProxy firewalls block network packets from passing to and from a protected network.
  • DComputers establish a connection with a proxy firewall which initiates a new network connection

How the community answered

(47 responses)
  • B
    4% (2)
  • C
    2% (1)
  • D
    94% (44)

Why each option

Proxy firewalls act as intermediaries by accepting a client connection and then initiating a separate, new connection to the destination on the client's behalf.

AProxy firewalls increase the speed and functionality of a network.

Proxy firewalls introduce processing overhead for each connection because they must terminate and re-initiate connections, which reduces rather than increases network speed.

BFirewall proxy servers decentralize all activity for an application.

Proxy firewalls centralize application activity through a single intermediary point of control, they do not decentralize it.

CProxy firewalls block network packets from passing to and from a protected network.

Blocking network packets from passing directly describes a packet-filtering firewall, whereas proxy firewalls forward traffic by proxying it through new connections rather than simply dropping packets.

DComputers establish a connection with a proxy firewall which initiates a new network connectionCorrect

A proxy firewall terminates the inbound client connection and establishes a brand-new outbound connection to the target server, so the two endpoints never communicate directly. This two-connection model allows the proxy to fully inspect and filter application-layer content before forwarding it. This behavior is the defining characteristic that distinguishes proxy firewalls from packet-filtering and stateful inspection firewalls.

Concept tested: Proxy firewall connection intermediary behavior

Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final

Topics

#proxy firewall#network connection#firewall architecture#packet filtering

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice