GCIA: GIAC Certified Intrusion AnalystDemo

Question

What does a firewall inspect to stop packets for certain ports and applications from entering an enterprise?

A The application layer port numbers and the transport layer headers
B The presentation layer headers and the session layer port numbers
C The network layer headers and the session layer port numbers
D The transport layer port numbers and the application layer headers

Explanation

Firewall rules use transport-layer port numbers to control TCP or UDP services, while application-layer inspection examines application protocol headers or payload data to identify and enforce controls for specific applications. Cisco Secure Firewall documentation describes controlling access based on SCTP ports and using application-layer inspection to filter applications.

Learn more

Cisco Secure Firewall ASA: SCTP Application Layer Inspection

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ333

Community Discussion