Which control items of HTTP can a firewall control? (Multiple choice)

Question

Options

• APOST operation
• BInternet proxy
• CFile upload
• DFile deletion

• A
  77% (24)
• D
  23% (7)

Explanation

Firewalls operating at the application layer (Layer 7) can inspect and filter HTTP traffic, giving them control over POST operations (A), which send data to servers - a common attack vector for injections and data exfiltration. They can also govern Internet proxy (B) access, acting as or controlling proxy servers to filter and log outbound requests. File uploads (C) are controllable because they travel over HTTP/FTP as network traffic that passes through the firewall's inspection engine.

File deletion (D) is the distractor because it is primarily a local filesystem operation - it happens on the server or client machine itself, not across the network as a distinct inspectable HTTP event. While HTTP has a DELETE method, "file deletion" as a general control item falls outside the firewall's network-boundary jurisdiction.

Memory tip: Think of what crosses the wire - firewalls police network traffic. POST sends data out, proxies route traffic, uploads push files over the network. Deletion is what happens after the file arrives, on the machine itself - the firewall already stepped aside.

No community discussion yet for this question.