N10-005 · Question #568
A firewall that operates at Layer 7 of the OSI model is known as a(n):
The correct answer is C. application level. A firewall that inspects traffic at OSI Layer 7 is called an application-level gateway, as it understands and filters based on application-layer protocols.
Question
A firewall that operates at Layer 7 of the OSI model is known as a(n):
Options
- Acircuit gateway
- Bpacket filter
- Capplication level
- Dredundant firewall
How the community answered
(36 responses)- A3% (1)
- C92% (33)
- D6% (2)
Why each option
A firewall that inspects traffic at OSI Layer 7 is called an application-level gateway, as it understands and filters based on application-layer protocols.
A circuit-level gateway operates at Layer 5 (Session layer) of the OSI model, monitoring TCP handshakes and sessions rather than application-layer content.
A packet filter firewall operates at Layers 3 and 4 of the OSI model, making decisions based on IP addresses, ports, and protocols - not application-layer content.
An application-level gateway (application proxy firewall) operates at Layer 7 of the OSI model and can inspect the full content of application-layer traffic, including protocols like HTTP, FTP, and DNS. This deep inspection capability allows it to make filtering decisions based on application-specific data, not just addresses or ports.
Redundant firewall describes a high-availability deployment architecture, not a classification of firewall type based on OSI layer of operation.
Concept tested: Application-layer firewall classification by OSI model
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.