Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 11 Question 22 Discussion

Posted by Matthew on May 08, 2022 at 12:17 AM

Which of the following statements pertaining to firewalls is incorrect?

Suggested Answer: C

Firewalls can protect a network at multiple layers of the OSI models, however most of the firewalls do not have the ability to monitor the payload of the packets and see if an application level attack is taking place.

Today there are a new breed of firewall called Unified Threat Managers or UTM. They are a collection of products on a single computer and not necessarily a typical firewall. A UTM can address all of the layers but typically a firewall cannot.

Firewalls are security checkpoints at the boundaries of internal networks through which every packet must pass and be inspected, hence they create bottlenecks between the internal and external networks. But since external connections are relatively slow compared to modern computers, the latency caused by this bottleneck can almost be transparent.

By implementing the concept of border security, they centralize security services in machines optimized and dedicated to the task, thus relieving the other hosts on the network from that function.

Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 1: Understanding Firewalls.


Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
LE
Leontine 11 months ago
Yeah, checkpoints are definitely a thing with firewalls!
DE
Dewitt 12 months ago
I thought firewalls were just for boundaries, not all layers.
VI
Vi 12 months ago
Wait, they don't protect at all layers of the OSI model?
JO
Jonell 12 months ago
Totally agree, they centralize security services.
OL
Olene 1 year ago
Firewalls do create bottlenecks, that's true.
BE
Bette 1 year ago
The checkpoint idea sounds right to me, but I can't recall if firewalls really protect at all OSI layers. I guess I need to think this through more.
AD
Adell 1 year ago
I feel like firewalls protect at certain layers, but not all layers of the OSI model. That might be the incorrect one.
MI
Mindy 1 year ago
I think firewalls do centralize security services, so that statement seems correct. I might need to double-check the OSI model part, though.
TI
Tijuana 1 year ago
I remember studying that firewalls can indeed create bottlenecks, but I'm not sure if that's the only incorrect statement here.
MA
Mari 1 year ago
Okay, let me think this through step-by-step. Economists and computer scientists study how agents (like consumers or algorithms) make decisions, and a key concept is how "happy" or satisfied the agent is with the outcome. I believe the technical term for this is utility. I'm pretty sure that's the right answer.
TE
Teddy 1 year ago
Hmm, this seems like a tricky one. I'll need to think carefully about the different options and how they might impact the execution time.
SA
Salome 1 year ago
I think the answer is A. Defining "Collect Runtime Statistics" on the SAS Data Integration Studio job seems like the right way to enable performance statistics.
GI
Gilma 1 year ago
I'm leaning towards PKI/CAC and Kerberos for this question. They both offer strong security features, right?
0/2000 characters

Save Cancel