156-215.80 · Question #57
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
The correct answer is B. Stateful Inspection. Stateful Inspection is the firewall technology that examines packet contents, extracts connection details such as source, destination, and session state, and stores that information in dynamic state tables to track ongoing connections.
Question
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
Options
- AINSPECT Engine
- BStateful Inspection
- CPacket Filtering
- DApplication Layer Firewall
How the community answered
(36 responses)- A3% (1)
- B86% (31)
- C3% (1)
- D8% (3)
Why each option
Stateful Inspection is the firewall technology that examines packet contents, extracts connection details such as source, destination, and session state, and stores that information in dynamic state tables to track ongoing connections.
The INSPECT Engine is Check Point's proprietary inspection engine that implements Stateful Inspection - it is the mechanism, not the technology concept itself that is defined by the use of state tables.
Stateful Inspection, pioneered by Check Point, operates by extracting detailed information from packets at multiple layers of the OSI model and recording that data in state tables. These tables allow the firewall to track the state of each active connection and make allow or deny decisions based on the full context of a session, not just individual packet headers. This is fundamentally different from simple packet filtering because decisions consider the established session state.
Packet Filtering evaluates packets individually against static rules based on headers only and does not maintain state tables or track connection context across multiple packets.
Application Layer Firewalls (proxy-based) inspect traffic at Layer 7 and understand application protocols, but their defining characteristic is deep protocol awareness rather than the maintenance of state tables.
Concept tested: Stateful Inspection technology and state table operation
Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SMAG/Stateful-Inspection.htm
Topics
Community Discussion
No community discussion yet for this question.