What Security Device Protects a New Web Portal Service?

SY0-701 By islever Editorial Last updated

Short answer

C WAF

Question

An organization recently started hosting a new service that customers access through a web portal. A security engineer needs to add to the existing security devices a new solution to protect this new service. Which of the following is the engineer most likely to deploy?
  1. Layer 4 firewall
  2. NGFW
  3. WAF Correct Answer
  4. UTM

Key Takeaways

The exam tests your ability to match security solutions to specific asset types: a web portal is an application, so a WAF (which protects web applications) is the correct choice, not a general-purpose firewall.

When an organization hosts a customer-facing web portal, a Web Application Firewall (WAF) is the most appropriate solution to protect the service. Community consensus strongly favors WAF over traditional firewalls or UTM devices because WAFs are specifically designed to filter and monitor HTTP/S traffic against web-based attacks.

Common mistake: Choosing NGFW (NGFW) is the most common mistake because it also provides application-level filtering, but it is not as specialized for protecting web applications from attacks like SQL injection and XSS, whereas WAF is explicitly designed for that purpose.

Expert Analysis

Why the Answer Is Correct

A WAF (Web Application Firewall) is purpose-built to protect web applications by filtering, monitoring, and blocking HTTP/S traffic. The question describes a web portal that customers access, which is exactly the use case for a WAF. Both community comment [1] and [2] highlight that WAF prevents attacks like SQL injection and cross-site scripting, making it the most logical deployment for the new service.

Why the Other Options Are Wrong

A Layer 4 firewall operates at the transport layer and does not inspect application-layer payloads, so it cannot detect web-specific attacks. An NGFW (Next-Generation Firewall) does include some application awareness, but it is a broader network security device and not as specialized for web application protection as a WAF. A UTM (Unified Threat Management) device combines multiple security functions but again is not specifically optimized for protecting a single web portal as thoroughly as a WAF.

Community Comment Notes

Comment [1] directly explains that WAF is the right answer because it protects web applications from HTTP/S-based attacks. Comment [2] reinforces this by noting WAF sits between the web application and the internet, filtering traffic. Comment [3] succinctly points out 'Portal -> WAF,' indicating the association between web portals and WAF is a key exam trigger. No comments contradict the correct answer.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

For security deployment questions, identify the type of asset being protected. If the asset is a web application or portal, WAF is almost always the correct answer; reserve NGFW for general network protection and Layer 4 firewalls for basic IP/port filtering.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. cri88 👍 5 Answered C
    C. WAF (Web Application Firewall) A Web Application Firewall (WAF) is specifically designed to protect web applications by filtering, monitoring, and blocking HTTP/S traffic to and from a web service. Since the organization is hosting a new service through a web portal, a WAF would be the most appropriate solution to protect against common web-based attacks like SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats. Layer 4 firewall (A) provides protection at the transport layer, which is too low-level to specifically protect web applications. NGFW (Next-Generation Firewall) (B) adds application-level filtering and protection, but is generally broader in scope, not specifically tailored to web applications. UTM (Unified Threat Management) (D) is a multi-functional security device but doesn't provide the specialized web application protection that a WAF offers. Thus, WAF is the most suitable solution for protecting a web service accessed via a portal.
  2. Cee007 👍 1 Answered C
    C. WAF (Web Application Firewall) A WAF is specifically designed to protect web applications by filtering and monitoring HTTP traffic between a web application and the internet. It can help prevent attacks such as SQL injection, cross-site scripting (XSS), and other web-based threats that could target the new service accessed through the web portal.
  3. FrozenCarrot 👍 1
    Portal -> WAF

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide