GIAC Certified Enterprise Defender (GCED) — Question 5

On which layer of the OSI Reference Model does the FWSnort utility function?

Answer options

• A. Physical Layer
• B. Data Link Layer
• C. Transport Layer
• D. Session Layer
• E. Application Layer

Correct answer: C

Explanation

FWSnort is a utility that works at the Transport Layer of the OSI model, which is responsible for delivering messages between networked devices. The other layers do not deal with the transport of data in the same manner, as the Physical Layer handles the actual transmission of raw data, the Data Link Layer focuses on node-to-node data transfer, the Session Layer manages sessions, and the Application Layer interacts with end-user applications.