CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ68

VerifiedCommunication and Network Security

A network security engineer must ensure that a security solution analyzes traffic for protocol manipulation and various types of common attacks. In addition, all Uniform Resource Locator (URL) traffic must be inspected, and users must be prevented from browsing inappropriate websites. Which of the following solutions should be implemented to provide administrators with the capability to analyze traffic, blacklist external sites, and log user traffic for later analysis?

Explanation

An application-level proxy examines application-layer traffic such as HTTP requests and URLs. It can enforce web-content and URL-filtering policies, block blacklisted external sites, validate protocol behavior, detect common application-layer attacks, and produce detailed logs of users' web traffic. NIST describes application-proxy gateways as supporting content filtering, protocol-behavior validation, application-layer attack detection, access control, and extensive logging.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!