Regarding network firewalls preventing Web Application attacks which is the TRUE statement?

A Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

explanation

Network layer firewalls, also known as packet filters, operate at a low level of the TCP/IP protocol stack, preventing packets from passing through unless they meet the predefined rule set. An application-layer firewall would be necessary to avoid Web Application attacks.