Which statement best describes the main function of an application firewall?

• A. It primarily provides router-level packet forwarding.
• B. It only performs logging.
• C. It monitors and controls communications of an application based on a policy.
• D. It replaces the need for a firewall.

Answer: (C)

Application firewalls focus on how an application communicates by inspecting traffic at the application layer and enforcing policy-driven controls. They don’t just forward packets or log events; they actively monitor requests going to an application and enforce rules about what is allowed, modified, or blocked based on the policy and the content of the communication. This deep, protocol-aware control is what sets them apart from simpler firewall devices that operate at lower layers. They don’t replace all firewall functionality but add a layer of protection by enforcing application-specific behavior. So the main function is to monitor and control communications of an application based on a policy.