nerdexam
Cisco

200-201 · Question #502

What are two differences and benefits of packet filtering, stateful firewalling, and deep packet inspections? (Choose two.)

The correct answer is B. Deep packet inspection is capable of malware blocking, and packet filtering is not. E. Stateful inspection is capable of TCP state tracking, and deep packet inspection checks only TCP. Packet filtering firewalls inspect packets based on Layer 3 (IP addresses) and Layer 4 (protocols and ports) information. Deep Packet Inspection (DPI) goes further, analyzing traffic up to Layer 7 (application layer), enabling inspection of content within the packets. DPI can…

Submitted by wei.xz· Mar 6, 2026Network Intrusion Analysis

Question

What are two differences and benefits of packet filtering, stateful firewalling, and deep packet inspections? (Choose two.)

Options

  • APacket filtering is capable of UDP state monitoring only, and stateful inspection can provide
  • BDeep packet inspection is capable of malware blocking, and packet filtering is not.
  • CStateful inspection is capable of packet data inspections, and deep packet inspection is not.
  • DDeep packet inspection operates up to Layer 7, and packet filtering operates on Layer 3 and 4 of
  • EStateful inspection is capable of TCP state tracking, and deep packet inspection checks only TCP

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    92% (24)
  • C
    4% (1)

Explanation

Packet filtering firewalls inspect packets based on Layer 3 (IP addresses) and Layer 4 (protocols and ports) information. Deep Packet Inspection (DPI) goes further, analyzing traffic up to Layer 7 (application layer), enabling inspection of content within the packets. DPI can detect and block malicious content, malware, or application-level threats by analyzing packet payloads, which is beyond the capability of simple packet filtering firewalls.

Topics

#firewall types#packet filtering#stateful inspection#deep packet inspection

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice