Question:
Which type of firewall filters is based on application - layer data such as URL and HTTP headers ?
Which type of firewall filters is based on application - layer data such as URL and HTTP headers ?
Show Hint
Match the data to the OSI layer: IP/Port = Packet Filter (Layer 3/4). HTTP/URL/Header = Application Gateway (Layer 7).
Updated On: Jun 6, 2026
- Packet-filtering firewall
- Stateful inspection firewall
- Application proxy firewall
- Circuit level gateway
Show Solution
Verified By Collegedunia
The Correct Option is C
Solution and Explanation
Firewalls operate at different layers of the OSI model to protect networks.
1. Packet-Filtering Firewall:
Works at the Network Layer (Layer 3). It inspects IP addresses and port numbers but cannot "see" what is inside the data packets.
2. Circuit-Level Gateway:
Works at the Session Layer (Layer 5). It monitors TCP handshaking to determine if a session is legitimate but doesn't inspect application data.
3. Application Proxy Firewall (Application-Level Gateway):
This firewall operates at the Application Layer (Layer 7). It acts as an intermediary (proxy). Because it understands specific protocols like HTTP, FTP, and SMTP, it can inspect deep into the packet to filter based on:
• Specific URLs.
• HTTP headers (e.g., User-Agent).
• Specific commands within the protocol. 4. Conclusion: Since URLs and HTTP headers are application-specific data, only an Application Proxy Firewall can perform this level of deep-packet inspection.
• Specific URLs.
• HTTP headers (e.g., User-Agent).
• Specific commands within the protocol. 4. Conclusion: Since URLs and HTTP headers are application-specific data, only an Application Proxy Firewall can perform this level of deep-packet inspection.
Was this answer helpful?
0
0
Top CUET PG Data Science A.I Cyber Security and Computer Sci. Questions
- Choose the correct answer from the options given below:
(A). RAID 3 requires only a single redundant disk.
(B) In RAID 4 scheme, two different parity calculations are carried out and stored in separate blocks on different disks.
(C) RAID 5 distributes the parity strips across all disks.
(D) In RAID 2, the number of redundant disks are proportional to the log of the number of data disks. - In case of DMA, after the completion of the transfer, the processor is required to be notified of the completion. This is done through.
- In a two-level memory hierarchy, the access time of the cache memory is 12 nsec and the access time of the main memory is 1.5 msec. The hit ratio is 0.98. What is the average access time of the two-level memory system?
- Match List I with List II.
List I List II A. Supervisor mode I. Entered when the processor encounters a software interrupt instruction B. Abort Mode II. Entered in response to memory fault C. Fast Interrupt Mode III. Entered whenever the processor receives an interrupt signal from a designated fast interrupt source D. Interrupt Mode IV. Entered whenever the processor receives an interrupt signal from any other source - Deallocation of stack of thread and register contexts will take place.
View More Questions
Top CUET PG Cryptography & Network Security Questions
- Which is not a requirement of digital signatures:
- Rail fence technique is an example of:
- In the DES algorithm, the round input is 32 bits, which is expanded to 48 bits via:
- The best-known multiple-letter encryption cipher is:
- Computation of the discrete logarithm is the basis of the cryptographic system:
View More Questions
Top CUET PG Questions
- Given below are two statements:
Statement I: For Plato the meaning of the word 'Justice' is basically a conception in the mind only.
Statement II: For Plato the meaning of the word 'Justice' is fixed, mind-independently
In the light of the above statements, choose the correct answer from the options given below: - What is the electron count of OS6CO182-?
- XeF4 hydrolysis gives A + B, HF, and Oxygen. Find A and B
- What is more basic in pyrol and pyridine?
- Hydrolysis of Al2C3, Be2?
View More Questions