nerdexam
Check_Point

156-215.80 · Question #57

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

The correct answer is B. Stateful Inspection. Stateful Inspection is the firewall technology that examines packet contents, extracts connection details such as source, destination, and session state, and stores that information in dynamic state tables to track ongoing connections.

Introduction to Check Point Technology

Question

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Options

  • AINSPECT Engine
  • BStateful Inspection
  • CPacket Filtering
  • DApplication Layer Firewall

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    86% (31)
  • C
    3% (1)
  • D
    8% (3)

Why each option

Stateful Inspection is the firewall technology that examines packet contents, extracts connection details such as source, destination, and session state, and stores that information in dynamic state tables to track ongoing connections.

AINSPECT Engine

The INSPECT Engine is Check Point's proprietary inspection engine that implements Stateful Inspection - it is the mechanism, not the technology concept itself that is defined by the use of state tables.

BStateful InspectionCorrect

Stateful Inspection, pioneered by Check Point, operates by extracting detailed information from packets at multiple layers of the OSI model and recording that data in state tables. These tables allow the firewall to track the state of each active connection and make allow or deny decisions based on the full context of a session, not just individual packet headers. This is fundamentally different from simple packet filtering because decisions consider the established session state.

CPacket Filtering

Packet Filtering evaluates packets individually against static rules based on headers only and does not maintain state tables or track connection context across multiple packets.

DApplication Layer Firewall

Application Layer Firewalls (proxy-based) inspect traffic at Layer 7 and understand application protocols, but their defining characteristic is deep protocol awareness rather than the maintenance of state tables.

Concept tested: Stateful Inspection technology and state table operation

Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SMAG/Stateful-Inspection.htm

Topics

#Stateful Inspection#state tables#packet inspection#firewall technology

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice