312-50V10 · Question #548
Which of the following types of firewall inspects only header information in network traffic?
The correct answer is A. Packet filter. A packet filter firewall operates at the network layer and makes decisions based solely on header fields such as source/destination IP address, port numbers, and protocol type, without examining payload content or tracking connection state.
Question
Which of the following types of firewall inspects only header information in network traffic?
Options
- APacket filter
- BStateful inspection
- CCircuit-level gateway
- DApplication-level gateway
How the community answered
(37 responses)- A86% (32)
- B3% (1)
- C8% (3)
- D3% (1)
Why each option
A packet filter firewall operates at the network layer and makes decisions based solely on header fields such as source/destination IP address, port numbers, and protocol type, without examining payload content or tracking connection state.
Packet filter firewalls inspect only the header information of each packet - including IP addresses, ports, and protocol flags - and apply rules to allow or deny traffic. They do not examine the data payload, maintain connection state, or understand application-layer protocols, making them the simplest and least context-aware firewall type.
Stateful inspection firewalls go beyond headers by tracking the state of active connections in a state table, allowing them to make context-aware decisions based on whether a packet belongs to an established session.
Circuit-level gateways operate at the session layer and validate TCP handshakes to verify that sessions are legitimate before allowing traffic, which involves more than just header inspection.
Application-level gateways (proxy firewalls) perform deep packet inspection at Layer 7, analyzing the full application payload and protocol behavior, which is far more than header-only inspection.
Concept tested: Packet filter firewall header-only inspection behavior
Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-statefulinspection.html
Topics
Community Discussion
No community discussion yet for this question.