Where are network-based and host-based application firewalls deployed?

• A. They are always cloud-based.
• B. Network-based are deployed on individual hosts; host-based are on network path.
• C. They are deployed only on routers.
• D. Network-based are deployed on the network path; host-based are installed on individual hosts.

Answer: (D)

The idea being tested is where application firewalls sit to protect traffic. A network-based application firewall is placed in the network path—between networks or at the gateway—so it can monitor and control traffic as it moves across the network, applying policies for many devices from a single point. A host-based application firewall, on the other hand, runs on an individual host (server or desktop) and protects that specific machine’s applications by filtering inbound and outbound connections for that host. That’s why the correct description is that network-based firewalls are deployed on the network path while host-based firewalls are installed on individual hosts. The other options are not accurate because firewalls aren’t restricted to being cloud-based, they aren’t limited to routers, and their placement isn’t confined to a single network device type.