Which firewall type works as a proxy server and filters connections for specific services and protocols when acting as a proxy?

Which firewall type works as a proxy server and filters connections for specific services and protocols when acting as a proxy?

• A. NAT
• B. Honeytrap
• C. Application-Level Proxy
• D. Passive Application-Level Firewall

Answer: (C)

An application-level proxy is at work here. It sits between the client and the service, terminates the client connection, and then opens a new connection to the requested service. Because it operates at the application layer, it can understand and inspect protocol-specific commands and enforce rules for that particular service or protocol, such as filtering HTTP methods or SMTP commands. This is what lets it proxy traffic and enforce control based on the service being accessed. NAT simply translates IP addresses and, at most, ports; it doesn’t inspect or proxy the application data, so it doesn’t filter by service or protocol in the way described. A honeytrap is a decoy system used to lure attackers, not a firewall type. A passive application-level firewall would monitor traffic without actively proxying or enforcing rules, while the scenario specifies active proxy behavior.

An application-level proxy is at work here. It sits between the client and the service, terminates the client connection, and then opens a new connection to the requested service. Because it operates at the application layer, it can understand and inspect protocol-specific commands and enforce rules for that particular service or protocol, such as filtering HTTP methods or SMTP commands. This is what lets it proxy traffic and enforce control based on the service being accessed.

NAT simply translates IP addresses and, at most, ports; it doesn’t inspect or proxy the application data, so it doesn’t filter by service or protocol in the way described. A honeytrap is a decoy system used to lure attackers, not a firewall type. A passive application-level firewall would monitor traffic without actively proxying or enforcing rules, while the scenario specifies active proxy behavior.