WatchGuard Network Security Essentials — Question 38

How is a proxy policy different from a packet filter policy? (Select two.)

Answer options

• A. Only a proxy policy examines information in the IP header.
• B. Only a proxy policy uses the IP source, destination, and port to control network traffic.
• C. Only a proxy policy can prevent specific threats without blocking the entire connection.
• D. Only a proxy works at the application, network, and transport layers to examine all connection data.

Correct answer: C, D

Explanation

The correct answers are C and D because a proxy policy specifically has the capability to mitigate certain threats without severing the entire connection, which packet filtering cannot do. Additionally, a proxy operates at multiple layers (application, network, and transport) to inspect comprehensive connection data, unlike packet filters that primarily focus on the network layer.