nerdexam
GIAC

GCIH · Question #549

You are planning to upgrade several packet filtering firewalls to proxy firewalls and need to make a presentation to management. During the presentation, a member of management asks you to explain…

The correct answer is C. Packet filters forward the original packet through the device, proxy firewalls create a new packet. Packet filters forward the original packet through to the other side, while proxy firewalls create a new packet before forwarding it. The other statements are incorrect: packet filters look only at the header, not at the data of a packet. A stateful firewall is a type of packet…

Incident Response & Cyber Kill Chain

Question

You are planning to upgrade several packet filtering firewalls to proxy firewalls and need to make a presentation to management. During the presentation, a member of management asks you to explain the difference between packet filters and proxies. Which of the following statements describes this difference?

Options

  • APacket filters look at the data portion of the packet, proxy firewalls look only at the header
  • BPacket filters cannot process requests as quickly as proxy firewalls
  • CPacket filters forward the original packet through the device, proxy firewalls create a new packet
  • DPacket filters have the ability to perform string searches on the packet, while proxy firewalls do

How the community answered

(29 responses)
  • B
    3% (1)
  • C
    93% (27)
  • D
    3% (1)

Explanation

Packet filters forward the original packet through to the other side, while proxy firewalls create a new packet before forwarding it. The other statements are incorrect: packet filters look only at the header, not at the data of a packet. A stateful firewall is a type of packet filtering firewall that IS able to determine existing connections. Finally, proxy firewalls tend to process more slowly than packet filters, since they are looking at the data portion as well as the headers.

Topics

#packet filtering#proxy firewall#firewall types#network defense

Community Discussion

No community discussion yet for this question.

Full GCIH Practice