nerdexam
GIAC

GCIA · Question #81

What are the advantages of an application layer firewall? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. It provides detailed logging information for management purposes. B. It prevents most of the spoofing and DoS attacks. C. It monitors and filters data. Application layer firewalls operate at OSI Layer 7, enabling deep packet inspection that supports detailed logging, spoofing/DoS mitigation, and content filtering - but they do not provide device authentication.

Network Traffic Analysis & Protocol Review

Question

What are the advantages of an application layer firewall? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt provides detailed logging information for management purposes.
  • BIt prevents most of the spoofing and DoS attacks.
  • CIt monitors and filters data.
  • DIt provides authentication to a device.

How the community answered

(55 responses)
  • A
    78% (43)
  • D
    22% (12)

Why each option

Application layer firewalls operate at OSI Layer 7, enabling deep packet inspection that supports detailed logging, spoofing/DoS mitigation, and content filtering - but they do not provide device authentication.

AIt provides detailed logging information for management purposes.Correct

Because application layer firewalls inspect traffic at the content level, they can record application-specific details such as URLs, commands, and user activity, producing richer logs than packet-filtering firewalls.

BIt prevents most of the spoofing and DoS attacks.Correct

Application layer firewalls maintain state and inspect payload content, allowing them to detect and block spoofed source addresses and recognize patterns characteristic of DoS attacks before they reach internal hosts.

CIt monitors and filters data.Correct

Monitoring and filtering application-layer data (HTTP, FTP, DNS, etc.) is the defining capability of this firewall type, allowing it to enforce policy based on content rather than just port and address.

DIt provides authentication to a device.

Device authentication is handled by AAA frameworks (RADIUS, TACACS+) or network access control systems, not by application layer firewalls, which enforce traffic policy rather than authenticate endpoints.

Concept tested: Application layer firewall capabilities and limitations

Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final

Topics

#application layer firewall#proxy firewall#traffic filtering#DoS prevention

Community Discussion

No community discussion yet for this question.

Full GCIA Practice