H12-725_V4.0 · Question #119
Firewall application behavior control technology cannot control which of the following application behaviors?
The correct answer is B. SSH. SSH (B) is correct because its traffic is fully encrypted end-to-end, preventing application behavior control from inspecting the payload. A firewall can block SSH traffic entirely (by port or rule), but it cannot analyze or control what happens within an SSH session - commands…
Question
Firewall application behavior control technology cannot control which of the following application behaviors?
Options
- AH
- BSSH
- CIM
- DFTP
How the community answered
(30 responses)- A7% (2)
- B83% (25)
- C3% (1)
- D7% (2)
Explanation
SSH (B) is correct because its traffic is fully encrypted end-to-end, preventing application behavior control from inspecting the payload. A firewall can block SSH traffic entirely (by port or rule), but it cannot analyze or control what happens within an SSH session - commands executed, data transferred, tunnels created - because the content is opaque to deep packet inspection.
The distractors are wrong because HTTP (H), IM, and FTP all transmit in cleartext or use application-layer protocols that firewalls can parse and inspect, allowing granular behavior control such as blocking file uploads, restricting IM file transfers, or limiting FTP write operations.
Memory tip: Think "SSH = Sealed Shell" - the encryption seals the session contents away from the firewall's visibility, making behavior control impossible even when the connection itself is permitted.
Topics
Community Discussion
No community discussion yet for this question.