GCIA · Question #44
Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?
The correct answer is B. Proxy-based firewall. A proxy-based firewall acts as an intermediary by terminating the client connection and initiating a separate connection to the destination server, creating two distinct communication channels.
Question
Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?
Options
- AStateful firewall
- BProxy-based firewall
- CPacket filter firewall
- DEndian firewall
How the community answered
(20 responses)- A5% (1)
- B80% (16)
- C5% (1)
- D10% (2)
Why each option
A proxy-based firewall acts as an intermediary by terminating the client connection and initiating a separate connection to the destination server, creating two distinct communication channels.
A stateful firewall tracks the state of active connections and allows return traffic, but it forwards packets directly between client and server rather than creating two separate communication sessions.
A proxy-based (application proxy) firewall terminates the inbound client connection at the firewall itself, inspects the application-layer data, and then opens a second independent connection to the destination server on the client's behalf. This two-connection model allows deep content inspection and completely hides the internal network topology from external hosts.
A packet filter firewall inspects individual packets based on header fields (IP, port, protocol) without maintaining session state or proxying connections - it does not split the communication into two sessions.
Endian Firewall is a specific Linux-based UTM appliance product name, not a category of firewall defined by its connection-handling behavior.
Concept tested: Proxy-based firewall two-connection architecture
Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confproxy.html
Topics
Community Discussion
No community discussion yet for this question.