nerdexam
EC-Council

312-50V10 · Question #548

Which of the following types of firewall inspects only header information in network traffic?

The correct answer is A. Packet filter. A packet filter firewall operates at the network layer and makes decisions based solely on header fields such as source/destination IP address, port numbers, and protocol type, without examining payload content or tracking connection state.

Evading IDS, Firewalls, and Honeypots

Question

Which of the following types of firewall inspects only header information in network traffic?

Options

  • APacket filter
  • BStateful inspection
  • CCircuit-level gateway
  • DApplication-level gateway

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

A packet filter firewall operates at the network layer and makes decisions based solely on header fields such as source/destination IP address, port numbers, and protocol type, without examining payload content or tracking connection state.

APacket filterCorrect

Packet filter firewalls inspect only the header information of each packet - including IP addresses, ports, and protocol flags - and apply rules to allow or deny traffic. They do not examine the data payload, maintain connection state, or understand application-layer protocols, making them the simplest and least context-aware firewall type.

BStateful inspection

Stateful inspection firewalls go beyond headers by tracking the state of active connections in a state table, allowing them to make context-aware decisions based on whether a packet belongs to an established session.

CCircuit-level gateway

Circuit-level gateways operate at the session layer and validate TCP handshakes to verify that sessions are legitimate before allowing traffic, which involves more than just header inspection.

DApplication-level gateway

Application-level gateways (proxy firewalls) perform deep packet inspection at Layer 7, analyzing the full application payload and protocol behavior, which is far more than header-only inspection.

Concept tested: Packet filter firewall header-only inspection behavior

Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-statefulinspection.html

Topics

#packet filter#firewall types#header inspection#network filtering

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice