What is a common limitation of firewalls?

What is a common limitation of firewalls?

• A. They prevent all attacks
• B. They are often a main target for attacks
• C. They eliminate backdoor attacks
• D. They can't provide authentication

Answer: (B)

Firewalls are a common target because they sit at the network’s border and control access to the internal environment. They are high-value, complex devices with many features and configurations, making them attractive to attackers who want to bypass defenses or gain a foothold inside the network. If an attacker compromises the firewall or its management interface, they can often pivot into protected resources, which is why this device is frequently targeted in real-world attacks. This explains why the statement about being a main target is the best answer. Keep in mind that no single device can stop every attack. Even a well-configured firewall can miss threats, especially those that use encrypted channels, zero-day exploits, or legitimate traffic that should be allowed by policy. Firewalls also don’t by themselves eliminate backdoors, which can reside on hosts or in other parts of the infrastructure, and while many firewalls offer authentication features for remote access, they aren’t a substitute for proper authentication mechanisms across the system.

Firewalls are a common target because they sit at the network’s border and control access to the internal environment. They are high-value, complex devices with many features and configurations, making them attractive to attackers who want to bypass defenses or gain a foothold inside the network. If an attacker compromises the firewall or its management interface, they can often pivot into protected resources, which is why this device is frequently targeted in real-world attacks. This explains why the statement about being a main target is the best answer.

Keep in mind that no single device can stop every attack. Even a well-configured firewall can miss threats, especially those that use encrypted channels, zero-day exploits, or legitimate traffic that should be allowed by policy. Firewalls also don’t by themselves eliminate backdoors, which can reside on hosts or in other parts of the infrastructure, and while many firewalls offer authentication features for remote access, they aren’t a substitute for proper authentication mechanisms across the system.