CAS-001 · Question #139
A company has a single subnet in a small office. The administrator wants to limit non-web related traffic to the corporate intranet server as well as prevent abnormal HTTP requests and HTTP protocol…
The correct answer is D. Host firewall and WAF. This question presents two distinct requirements that map directly to two specific technologies. A host-based firewall on the intranet server restricts inbound traffic by port/protocol, limiting access to only web-related traffic (ports 80/443) and blocking everything else. A…
Question
A company has a single subnet in a small office. The administrator wants to limit non-web related traffic to the corporate intranet server as well as prevent abnormal HTTP requests and HTTP protocol anomalies from causing problems with the web server. Which of the following is the MOST likely solution?
Options
- AApplication firewall and NIPS
- BEdge firewall and HIDS
- CACLs and anti-virus
- DHost firewall and WAF
How the community answered
(65 responses)- A6% (4)
- B14% (9)
- C3% (2)
- D77% (50)
Explanation
This question presents two distinct requirements that map directly to two specific technologies. A host-based firewall on the intranet server restricts inbound traffic by port/protocol, limiting access to only web-related traffic (ports 80/443) and blocking everything else. A Web Application Firewall (WAF) inspects HTTP/HTTPS traffic at the application layer, detecting and blocking abnormal requests, protocol anomalies, and application-layer attacks. Together they precisely satisfy both stated requirements. Option A (application firewall + NIPS) would work at the network level but NIPS is not optimized for HTTP protocol anomalies the way a WAF is. Option B (edge firewall + HIDS) addresses perimeter filtering and host intrusion detection but not HTTP-specific anomalies. Option C (ACLs + anti-virus) addresses access control and malware but not web application-layer attacks.
Topics
Community Discussion
No community discussion yet for this question.