156-215.80 · Question #547
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
The correct answer is B. Next-Generation Firewall. Next-Generation Firewalls perform deep packet inspection and maintain state tables that store detailed connection and session information for policy enforcement.
Question
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
Options
- AINSPECT Engine
- BNext-Generation Firewall
- CPacket Filtering
- DApplication Layer Firewall
How the community answered
(27 responses)- A4% (1)
- B93% (25)
- D4% (1)
Why each option
Next-Generation Firewalls perform deep packet inspection and maintain state tables that store detailed connection and session information for policy enforcement.
The INSPECT Engine is Check Point's proprietary internal inspection component, not a standalone general technology category that broadly describes packet state extraction and table storage.
Next-Generation Firewalls extract detailed information from packets - including application data, user identity, and content - and store this in state tables to track connection state across sessions. This stateful deep inspection capability is a defining characteristic of NGFWs, enabling granular security policy enforcement that goes beyond header-only analysis.
Packet Filtering only examines packet headers such as source/destination IP and port number, and does not extract detailed packet payload information or maintain state tables.
Application Layer Firewalls inspect application-layer protocol data but represent an older and narrower capability that does not fully encompass the stateful table-based tracking described in the question.
Concept tested: Next-Generation Firewall stateful deep packet inspection
Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_NextGenerationFirewall_AdminGuide/Default.htm
Topics
Community Discussion
No community discussion yet for this question.