GCIA · Question #81
What are the advantages of an application layer firewall? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. It provides detailed logging information for management purposes. B. It prevents most of the spoofing and DoS attacks. C. It monitors and filters data. Application layer firewalls operate at OSI Layer 7, enabling deep packet inspection that supports detailed logging, spoofing/DoS mitigation, and content filtering - but they do not provide device authentication.
Question
What are the advantages of an application layer firewall? Each correct answer represents a complete solution. Choose all that apply.
Options
- AIt provides detailed logging information for management purposes.
- BIt prevents most of the spoofing and DoS attacks.
- CIt monitors and filters data.
- DIt provides authentication to a device.
How the community answered
(55 responses)- A78% (43)
- D22% (12)
Why each option
Application layer firewalls operate at OSI Layer 7, enabling deep packet inspection that supports detailed logging, spoofing/DoS mitigation, and content filtering - but they do not provide device authentication.
Because application layer firewalls inspect traffic at the content level, they can record application-specific details such as URLs, commands, and user activity, producing richer logs than packet-filtering firewalls.
Application layer firewalls maintain state and inspect payload content, allowing them to detect and block spoofed source addresses and recognize patterns characteristic of DoS attacks before they reach internal hosts.
Monitoring and filtering application-layer data (HTTP, FTP, DNS, etc.) is the defining capability of this firewall type, allowing it to enforce policy based on content rather than just port and address.
Device authentication is handled by AAA frameworks (RADIUS, TACACS+) or network access control systems, not by application layer firewalls, which enforce traffic policy rather than authenticate endpoints.
Concept tested: Application layer firewall capabilities and limitations
Source: https://csrc.nist.gov/publications/detail/sp/800-41/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.