Which of the following items are not included in the content security filtering technology supported by the firewall? (Multiple choice)

Question

Options

• AWeb server protection
• BDDoS protection
• CFile filtering
• DURL filtering

• A
  70% (26)
• C
  11% (4)
• D
  19% (7)

Explanation

Web server protection (A) and DDoS protection (B) fall outside the scope of content security filtering because they operate at different security layers. Web server protection is a function of Web Application Firewalls (WAF), a distinct security component designed to guard against application-layer attacks targeting servers directly. DDoS protection addresses volumetric/network-layer flood attacks and is handled by dedicated anti-DDoS systems, not content inspection engines.

C and D are wrong choices (i.e., they are included in content security filtering): URL filtering and file filtering are core content security capabilities - firewalls inspect traffic and block access based on URL categories or file types/content, which is precisely what "content security filtering" means.

Memory tip: Think "content = what's inside the traffic." URL filtering and file filtering examine the payload/destination of traffic - that's content. Web server protection and DDoS defense operate around the traffic (protecting servers, absorbing floods) rather than filtering content, so they live in separate security categories.

No community discussion yet for this question.