nerdexam
EC-Council

312-50V9 · Question #422

Which of the following types of firewall inspects only header information in network traffic?

The correct answer is A. Packet filter. A packet filter firewall makes allow/deny decisions based solely on header fields such as source/destination IP, port, and protocol, without examining packet payload or connection state.

Evading IDS, Firewalls, and Honeypots

Question

Which of the following types of firewall inspects only header information in network traffic?

Options

  • APacket filter
  • BStateful inspection
  • CCircuit-level gateway
  • DApplication-level gateway

How the community answered

(24 responses)
  • A
    92% (22)
  • C
    4% (1)
  • D
    4% (1)

Why each option

A packet filter firewall makes allow/deny decisions based solely on header fields such as source/destination IP, port, and protocol, without examining packet payload or connection state.

APacket filterCorrect

Packet filter firewalls operate at the network layer and inspect only the header information of each packet - including source IP, destination IP, source port, destination port, and protocol. They apply static ACL-like rules to each packet independently without tracking session state or analyzing application-layer content. This makes them fast but less capable of detecting application-level threats.

BStateful inspection

Stateful inspection firewalls go beyond header inspection by tracking the state of active connections in a state table, allowing them to validate that packets belong to an established session.

CCircuit-level gateway

Circuit-level gateway firewalls operate at the session layer and validate TCP handshake completion rather than simply checking header fields in isolation.

DApplication-level gateway

Application-level gateway firewalls (proxies) perform deep packet inspection at the application layer, examining payload content and application-specific commands, far beyond just header information.

Concept tested: Packet filter firewall header-only inspection behavior

Source: https://learn.microsoft.com/en-us/windows-server/security/windows-firewall/windows-firewall-with-advanced-security

Topics

#packet filter#firewall types#header inspection#network traffic filtering

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice