During a black-box pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?
The fact that the firewall is able to distinguish IRC web traffic from regular port 80 web traffic means it's inspecting at layer 7 or doing "deep packet". This is functionality of an Application layer firewall.
The question is related to the outbound traffic, not to the inbound traffic where there is IRC traffic. Since the question is about inbound/outbound traffic impeded and unimpeded at same time the correct answer is "B".
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Bodescu
7 months ago1p0n1x
1 year, 9 months ago