Check Point Certified Security Administrator (CCSA) R81 — Question 193

Which type of attack can a firewall NOT prevent?

Answer options

• A. Buffer Overflow
• B. SYN Flood
• C. SQL Injection
• D. Network Bandwidth Saturation

Correct answer: D

Explanation

A firewall is designed to filter traffic and can mitigate SYN Flood attacks, SQL Injection attempts, and can also help manage bandwidth. However, it cannot prevent Network Bandwidth Saturation, which typically involves overwhelming a network with excessive traffic, a situation that requires more advanced solutions than just firewall rules.