What are the security risks if the firewall being used does not perform advanced application inspection and control like the ASA Security Appliance does?

Your customer has a basic stateful firewall setup that only permits incoming traffic from the Internet to an internal web server. What are the security risks if the firewall being used does not perform advanced application inspection and control like the ASA Security Appliance does? (Choose two.)

Your customer has a basic stateful firewall setup that only permits incoming traffic from the Internet to an internal web server. What are the security risks if the firewall being used does not perform advanced application inspection and control like the ASA Security Appliance does? (Choose two.)

A.
Allowing all return traffic from the internal web server back out to the Internet may increase the risk of worm propagation.

B.
Peer-to-peer or instant messaging traffic using port 80 may exhaust the network capacity.

C.
Not validating port 80 traffic content may increase the risk of malware infection.

D.
Denial of service attacks launched against port 80 of the internal web server can bring down the web server.

E.
If the firewall cannot perform deep packet inspection, the firewall cannot properly classify the HTTP and HTTPS traffic. This may lead to connectivity issues from the Internet to the internal web server.



Leave a Reply 0

Your email address will not be published. Required fields are marked *