What are the characteristics of application firewalls? (Choose three.)

Question

Options

• Aproxies traffic rather than permitting direct communication between hosts
• Bcan be used to implement strong user authentication
• Cmonitor the internal network from untrusted networks
• Dis extremely fast and has no impact on network performance

• A
  86% (18)
• B
  10% (2)
• C
  5% (1)

Explanation

Note: This question asks to "choose three," but only option A is listed as correct - likely a formatting error in the source material. Based on standard exam content (CompTIA Security+/Network+), the correct three answers are A, B, and C, with D as the sole distractor.

A is correct because application firewalls operate as proxy intermediaries - they terminate the client connection, inspect traffic at the application layer (Layer 7), then forward it, preventing any direct host-to-host communication. B is correct because application-layer inspection enables strong user authentication, something packet-filtering firewalls cannot do. C is correct because application firewalls are positioned between trusted and untrusted networks to monitor and control inbound/outbound traffic.

D is wrong because application firewalls are computationally expensive - deep packet inspection and proxying add latency, making them the slowest firewall type. Any answer claiming "no impact on network performance" for a firewall should be an immediate red flag.

Memory tip: Think of an application firewall as a hotel concierge - every guest (packet) must go through the concierge (proxy), show ID (authentication), and get screened (application inspection) before entering. Concierges take time; they are never "instant with no impact."

No community discussion yet for this question.