You work as a Network Administrator for company Inc. The company has deployed an ASA at the network perimeter. Which of the following types of firewall will you use to create two different…

Question

Options

• AStateful firewall
• BEndian firewall
• CPacket filter firewall
• DProxy-based firewall

• A
  2% (1)
• B
  6% (3)
• D
  92% (44)

Explanation

A proxy-based firewall (D) is correct because it acts as an intermediary, establishing one TCP connection with the client and a completely separate connection with the destination server - effectively creating two independent communication channels. This architecture allows the firewall to fully inspect, filter, and modify traffic at the application layer rather than simply forwarding packets.

Why the others are wrong:

• (A) Stateful firewall tracks the state of active connections and filters based on context, but it does not break the connection into two separate sessions - traffic still flows end-to-end between client and server.
• (B) Endian firewall is a specific Linux-based firewall distribution/product, not a firewall type defined by its connection-splitting behavior; it's a distractor based on brand familiarity.
• (C) Packet filter firewall operates at Layer 3/4, inspecting individual packets against rules (IP, port, protocol) with no awareness of sessions or application data - no intermediary connection is created at all.

Memory tip: Think of a proxy firewall as a "middleman translator" - the client talks to the proxy, and the proxy talks for the client to the server. Two conversations, one broker. The word "proxy" itself means "one authorized to act on behalf of another," which directly maps to the two-connection model.

No community discussion yet for this question.