What are the two differences between stateful and deep packet inspection? (Choose two)

Question

Options

• AStateful inspection is capable of TCP state tracking, and deep packet filtering checks only TCP
• BDeep packet inspection is capable of malware blocking, and stateful inspection is not.
• CDeep packet inspection operates on Layer 3 and 4, and stateful inspection operates on Layer 3 of
• DDeep packet inspection is capable of TCP state monitoring only, and stateful inspection can
• EStateful inspection is capable of packet data inspections, and deep packet inspection is not.

• A
  90% (18)
• C
  5% (1)
• E
  5% (1)

Explanation

The main difference between deep packet inspection and stateful inspection is the layer of the network stack at which they operate. Stateful inspection works at the transport layer (Layer 4) of the network stack, and it verifies that the contents of each packet are allowed based on the state of the connection. It does this by keeping track of the state of each connection, and only allowing packets that match an established connection to pass through. Stateful inspection can provide basic security against network attacks, such as denial-of-service attacks and spoofing attacks. Deep packet inspection, on the other hand, operates at the application layer (Layer 7) of the network stack. It inspects the contents of each packet in detail, looking for specific application- level information such as URLs, keywords, or file types. This allows it to identify and block specific types of traffic, such as malware or unwanted applications.

No community discussion yet for this question.