Exam 312-50 topic 3 question 5 discussion

Actual exam question from ECCouncil's 312-50

Question #: 5
Topic #: 3

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

A. Packet filtering firewall
B. Application-level firewall
C. Circuit-level gateway firewall
D. Stateful multilayer inspection firewall

Show Suggested Answer

Suggested Answer: C 🗳️

by dorinh at Nov. 30, 2021, 4:41 p.m.

Comments

Submit Cancel

carejohn

12 months ago

"monitoring TCP handshaking of packets at the session layer of the OSI model" is the point to note

upvoted 1 times

...

salei

1 year, 2 months ago

A circuit-level gateway is a type of firewall. Circuit-level gateways work at the session layer of the OSI model, or as a "shim-layer" between the application layer and the transport layer of the TCP/IP stack. They monitor TCP handshaking between packets to determine whether a requested session is legitimate.

upvoted 1 times

...

dorinh

2 years, 2 months ago

A circuit-level gateway firewall works at the session layer of the OSI model or transport layer of TCP/IP. It forwards data between networks without verification and blocks incoming packets from the host but allows the traffic to pass through itself. Information passed to remote computers through a circuit-level gateway will appear to have originated from the gateway, as the incoming traffic carries the IP address of the proxy (circuit-level gateway). Such firewalls monitor requests to create sessions and determine if those sessions will be allowed.

upvoted 2 times

...