nerdexam
Cisco

352-001 · Question #510

Which two disadvantages are of using proxy servers as compared to stateful firewalls? (Choose two)

The correct answer is B. Proxy servers must be explicitly set to support new applications and protocols. C. Proxy servers typically perform more slowly.. Proxy servers are slower than stateful firewalls and require explicit configuration for each application or protocol they support, making them less flexible and performant.

Designing Security

Question

Which two disadvantages are of using proxy servers as compared to stateful firewalls? (Choose two)

Options

  • AProxy servers expose the source addresses of traffic flows.
  • BProxy servers must be explicitly set to support new applications and protocols.
  • CProxy servers typically perform more slowly.
  • DProxy servers use network address translation as their primary security mechanism.

How the community answered

(33 responses)
  • A
    9% (3)
  • B
    76% (25)
  • D
    15% (5)

Why each option

Proxy servers are slower than stateful firewalls and require explicit configuration for each application or protocol they support, making them less flexible and performant.

AProxy servers expose the source addresses of traffic flows.

Proxy servers actually conceal source addresses by substituting their own address when forwarding traffic, providing better anonymity than stateful firewalls.

BProxy servers must be explicitly set to support new applications and protocols.Correct

Proxy servers operate at the application layer and must fully understand each protocol to terminate and re-initiate connections on behalf of clients; any new or unsupported application requires explicit proxy support to be added, unlike stateful firewalls which track connection state generically.

CProxy servers typically perform more slowly.Correct

Because proxy servers terminate each client connection, inspect the full application payload, and establish a new connection to the server, they introduce significantly more processing overhead and latency compared to stateful firewalls that only track connection state tables.

DProxy servers use network address translation as their primary security mechanism.

NAT is not the primary security mechanism of proxy servers; their security comes from application-layer inspection and connection termination, not address translation.

Concept tested: Proxy server limitations versus stateful firewall comparison

Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html

Topics

#proxy servers#stateful firewalls#security tradeoffs#application proxy

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice