nerdexam
GIAC

GCIA · Question #44

Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?

The correct answer is B. Proxy-based firewall. A proxy-based firewall acts as an intermediary by terminating the client connection and initiating a separate connection to the destination server, creating two distinct communication channels.

Network Traffic Analysis & Protocol Review

Question

Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?

Options

  • AStateful firewall
  • BProxy-based firewall
  • CPacket filter firewall
  • DEndian firewall

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    80% (16)
  • C
    5% (1)
  • D
    10% (2)

Why each option

A proxy-based firewall acts as an intermediary by terminating the client connection and initiating a separate connection to the destination server, creating two distinct communication channels.

AStateful firewall

A stateful firewall tracks the state of active connections and allows return traffic, but it forwards packets directly between client and server rather than creating two separate communication sessions.

BProxy-based firewallCorrect

A proxy-based (application proxy) firewall terminates the inbound client connection at the firewall itself, inspects the application-layer data, and then opens a second independent connection to the destination server on the client's behalf. This two-connection model allows deep content inspection and completely hides the internal network topology from external hosts.

CPacket filter firewall

A packet filter firewall inspects individual packets based on header fields (IP, port, protocol) without maintaining session state or proxying connections - it does not split the communication into two sessions.

DEndian firewall

Endian Firewall is a specific Linux-based UTM appliance product name, not a category of firewall defined by its connection-handling behavior.

Concept tested: Proxy-based firewall two-connection architecture

Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confproxy.html

Topics

#proxy firewall#firewall types#application-layer filtering#connection proxying

Community Discussion

No community discussion yet for this question.

Full GCIA Practice