CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: D - To monitor only TCP ports, John must implement a circuit-level firewall.

Key Takeaway: A circuit-level firewall works by monitoring and controlling TCP ports. It monitors the handshaking to make sure it is legitimate. The circuit-level firewall does not monitor the data thatpass over the connection. Application filtering monitors connections to check incoming e-mails for viruses. A circuit-level firewall allows all traffic to be passed after the connection is allowed. Stateful inspection firewalls immediately disconnect or drop the connection if an attempt is made to perform an action that is non-standard for the specific protocol.