In file filtering, which of the following attributes can the firewall identify in the received files? (Multiple choice)

Question

Options

• AFile transfer direction
• BFile type
• CFile extension
• DApplication protocol that hosts the file

• A
  100% (40)

Explanation

All four options are correct because modern next-generation firewalls (NGFWs) with file filtering capabilities perform deep packet inspection that reveals multiple file attributes simultaneously. File transfer direction (A) is identified by analyzing the traffic flow - whether the file is inbound (downloaded) or outbound (uploaded), which is critical for policy enforcement such as blocking outbound data exfiltration. File type (B) is determined by inspecting the file's magic bytes/header signatures, allowing the firewall to identify the true type regardless of how the file is named. File extension (C) is read directly from the filename metadata in the protocol, enabling extension-based rules (e.g., blocking .exe attachments). Application protocol (D) is identified through protocol analysis - the firewall determines whether the file is being carried over HTTP, FTP, SMTP, SMB, etc., so protocol-specific policies can be applied.

Since all options are correct, there are no distractors in this question - it tests whether candidates know the full scope of file filtering capabilities rather than assuming firewalls only check one or two attributes.

Memory tip: Think of the acronym DETA - Direction, Extension, Type, Application protocol. A firewall's file filter sees all of these at once, like a security guard who checks which door you used, what's in the box, what the label says, and which courier service delivered it.

No community discussion yet for this question.