Study. uk . com
  1. Home
  2. All questions
  3. Question 269

CISSP study material · question 269 of 500

A policy draft proposes writing most firewall rules against media access control addresses. What does NIST SP 800-41 observe about the data link layer?

  1. It is the preferred layer for rules, since hardware addresses cannot be spoofed.
  2. It is unavailable to firewalls, which begin inspection at the network layer.
  3. Firewall policies rarely concern themselves with it, since addresses there are below the level at which policy is normally written.
  4. It is used only by application-proxy gateways.
Show the answer

Answer: C. Firewall policies rarely concern themselves with it, since addresses there are below the level at which policy is normally written.

SP 800-41 notes that addresses at the data link layer are media access control addresses, and that firewall policies rarely concern themselves with that layer.

Source: NIST SP 800-41 Rev. 1 (NIST) — SP 800-41 Rev. 1 > 2. Overview of Firewall Technologies

Challenge yourself on this topic → Study as cards