CompTIA Network+ (N10-007) — Question 421

Which of the following devices would allow a network administrator to block an application at Layer 7 on the network?

Answer options

• A. Firewall
• B. NGFW
• C. Router
• D. Spam filter

Correct answer: B

Explanation

The correct answer is B, NGFW (Next-Generation Firewall), as it is specifically designed to inspect and control traffic at the application layer (Layer 7). While a traditional Firewall (A) can filter traffic, it typically operates at lower layers and lacks advanced application-level filtering. A Router (C) primarily directs traffic and does not perform application-layer blocking, and a Spam filter (D) is focused on email filtering rather than network application blocking.