ISC2 CC Network Security Practice Question
A security engineer is configuring a network security device that can block malicious HTTP requests based on application-layer inspection. Which device type is most suitable?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Web Application Firewall (WAF)
A Web Application Firewall (WAF) specifically inspects HTTP/HTTPS traffic and can block attacks like SQL injection and XSS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Intrusion Prevention System (IPS)
Why it's wrong here
IPS can block but is not specialized for web application attacks.
- ✗
Network-based Intrusion Detection System (NIDS)
Why it's wrong here
NIDS alerts only, does not block.
- ✓
Web Application Firewall (WAF)
Why this is correct
Correct. WAF inspects HTTP/HTTPS application layer traffic.
- ✗
Stateful firewall
Why it's wrong here
Stateful firewalls track connection state but lack deep application inspection.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Terminal Access Controller Access Control System Plus
TACACS+ is a network security protocol that separates authentication, authorization, and accounting to control who can access network devices and what they can do.
Key term
XSS
Cross-Site Scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.