200-201 · Question #502
What are two differences and benefits of packet filtering, stateful firewalling, and deep packet inspections? (Choose two.)
The correct answer is B. Deep packet inspection is capable of malware blocking, and packet filtering is not. E. Stateful inspection is capable of TCP state tracking, and deep packet inspection checks only TCP. Packet filtering firewalls inspect packets based on Layer 3 (IP addresses) and Layer 4 (protocols and ports) information. Deep Packet Inspection (DPI) goes further, analyzing traffic up to Layer 7 (application layer), enabling inspection of content within the packets. DPI can…
Question
What are two differences and benefits of packet filtering, stateful firewalling, and deep packet inspections? (Choose two.)
Options
- APacket filtering is capable of UDP state monitoring only, and stateful inspection can provide
- BDeep packet inspection is capable of malware blocking, and packet filtering is not.
- CStateful inspection is capable of packet data inspections, and deep packet inspection is not.
- DDeep packet inspection operates up to Layer 7, and packet filtering operates on Layer 3 and 4 of
- EStateful inspection is capable of TCP state tracking, and deep packet inspection checks only TCP
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- C4% (1)
Explanation
Packet filtering firewalls inspect packets based on Layer 3 (IP addresses) and Layer 4 (protocols and ports) information. Deep Packet Inspection (DPI) goes further, analyzing traffic up to Layer 7 (application layer), enabling inspection of content within the packets. DPI can detect and block malicious content, malware, or application-level threats by analyzing packet payloads, which is beyond the capability of simple packet filtering firewalls.
Topics
Community Discussion
No community discussion yet for this question.