312-50V9 · Question #422
Which of the following types of firewall inspects only header information in network traffic?
The correct answer is A. Packet filter. A packet filter firewall makes allow/deny decisions based solely on header fields such as source/destination IP, port, and protocol, without examining packet payload or connection state.
Question
Which of the following types of firewall inspects only header information in network traffic?
Options
- APacket filter
- BStateful inspection
- CCircuit-level gateway
- DApplication-level gateway
How the community answered
(24 responses)- A92% (22)
- C4% (1)
- D4% (1)
Why each option
A packet filter firewall makes allow/deny decisions based solely on header fields such as source/destination IP, port, and protocol, without examining packet payload or connection state.
Packet filter firewalls operate at the network layer and inspect only the header information of each packet - including source IP, destination IP, source port, destination port, and protocol. They apply static ACL-like rules to each packet independently without tracking session state or analyzing application-layer content. This makes them fast but less capable of detecting application-level threats.
Stateful inspection firewalls go beyond header inspection by tracking the state of active connections in a state table, allowing them to validate that packets belong to an established session.
Circuit-level gateway firewalls operate at the session layer and validate TCP handshake completion rather than simply checking header fields in isolation.
Application-level gateway firewalls (proxies) perform deep packet inspection at the application layer, examining payload content and application-specific commands, far beyond just header information.
Concept tested: Packet filter firewall header-only inspection behavior
Source: https://learn.microsoft.com/en-us/windows-server/security/windows-firewall/windows-firewall-with-advanced-security
Topics
Community Discussion
No community discussion yet for this question.