156-215.80 · Question #486
What is NOT an advantage of Stateful Inspection?
The correct answer is A. High Performance. High Performance is not a recognized advantage of Stateful Inspection because maintaining connection state tables introduces memory and CPU overhead relative to basic packet filtering.
Question
What is NOT an advantage of Stateful Inspection?
Options
- AHigh Performance
- BGood Security
- CNo Screening above Network layer
- DTransparency
How the community answered
(46 responses)- A93% (43)
- B4% (2)
- D2% (1)
Why each option
High Performance is not a recognized advantage of Stateful Inspection because maintaining connection state tables introduces memory and CPU overhead relative to basic packet filtering.
Stateful Inspection must create, store, and query a state table entry for every active connection, which consumes additional memory and processing resources per packet. This overhead means it does not deliver the raw throughput of simple packet filtering, so performance is not listed among its primary advantages. The standard advantages cited in Check Point courseware are Good Security, Transparency, and operating below the application layer.
Good Security is a genuine advantage because Stateful Inspection validates each packet against the known state of its connection, blocking spoofed or out-of-sequence packets that pure packet filtering would pass.
No Screening above Network layer is presented as an advantage because Stateful Inspection avoids the complexity and compatibility issues of full application-layer proxy processing, making it more universal and easier to deploy.
Transparency is a genuine advantage because Stateful Inspection requires no changes to client applications or end-user configuration, unlike application-layer proxies that may require client-side awareness.
Concept tested: Stateful Inspection firewall advantages and trade-offs
Source: https://www.checkpoint.com/cyber-hub/network-security/what-is-stateful-inspection/
Topics
Community Discussion
No community discussion yet for this question.