nerdexam
(ISC)2

CISSP · Question #1027

Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

The correct answer is B. A network-based firewall controls traffic passing through the device, while a host-based firewall. The main difference between a network-based firewall and a host-based firewall is that a network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device. A firewall is a device or a software that filters and

Submitted by jian89· Mar 5, 2026Communication and Network Security

Question

Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

Options

  • AA network-based firewall is stateful, while a host-based firewall is stateless.
  • BA network-based firewall controls traffic passing through the device, while a host-based firewall
  • CA network-based firewall verifies network traffic, while a host-based firewall verifies processes
  • DA network-based firewall blocks network intrusions, while a host-based firewall blocks malware.

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    91% (43)
  • C
    4% (2)
  • D
    2% (1)

Explanation

The main difference between a network-based firewall and a host-based firewall is that a network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device. A firewall is a device or a software that filters and regulates the network traffic based on a set of rules or policies, and that blocks or allows the traffic based on the source, destination, protocol, port, or content of the traffic. A network-based firewall is a type of firewall that is deployed at the network perimeter or the network segment, and that controls the traffic that passes through the device, such as the traffic that enters or exits the network, or the traffic that moves between different network zones or subnets. A host-based firewall is a type of firewall that is installed on a specific host or system, such as a server, a workstation, or a mobile device, and that controls the traffic that is destined for the device, such as the traffic that originates from or terminates at the device, or the traffic that is related to the applications or processes running on the device.

Topics

#Network firewall#Host-based firewall#Network security#Traffic filtering

Community Discussion

No community discussion yet for this question.

Full CISSP Practice