CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ260

VerifiedCommunication and Network Security

An information security administrator wants to block peer-to-peer (P2P) traffic carried through Hypertext Transfer Protocol (HTTP) tunnels. Which Open Systems Interconnection (OSI) model layer must be inspected?

Explanation

HTTP is an application-layer protocol, so identifying and blocking P2P traffic encapsulated in HTTP tunnels requires Layer 7 application inspection. Transport-layer inspection can identify ports and connections but cannot reliably distinguish tunneled application traffic. Microsoft identifies HTTP as an application protocol operating at the top OSI layer.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!