ISC2 CC Network Security Practice Question
Which firewall type is capable of inspecting the contents of application-layer traffic, such as HTTP requests, to detect malicious patterns?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Application proxy firewall
An application proxy firewall (also known as an application-level gateway) performs deep packet inspection at the application layer, allowing it to filter based on content like URLs or SQL commands.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Next-generation firewall
Why it's wrong here
NGFW also does deep inspection, but the question specifically asks for the type that is application proxy. However, NGFW is a broader category. Given the context, application proxy is the most direct answer.
- ✗
Stateful inspection firewall
Why it's wrong here
Stateful inspection tracks connection state but does not deeply inspect application data.
- ✓
Application proxy firewall
Why this is correct
Application proxy examines application-layer content.
- ✗
Packet filtering firewall
Why it's wrong here
Packet filtering only inspects headers at Layers 3/4.
Visual reference
Go deeper
Related to this question
Learn chapter
Logical Access Controls
Key term
Proxy
A proxy is an intermediary server that sits between a client and a destination server, forwarding requests and responses while providing security, privacy, and control.
Key term
Firewall
A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules to protect trusted internal networks from untrusted external networks.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.