Which are two main features of Stateful Firewalling? (Choose two.)

Question

Options

• AClientless lagging
• BFile retrospection
• CFull VX LAN support
• DFile reputation

• A
  91% (39)
• B
  7% (3)
• D
  2% (1)

Explanation

There is likely an error in the provided answer key - A (Clientless lagging) and C (Full VX LAN support) are not recognized as core features of stateful firewalling. "Clientless lagging" is not a standard networking or firewall term, and VXLAN support is a network virtualization capability unrelated to stateful inspection.

The two answers that actually align with advanced firewall features are B and D:

• File reputation (D) is a genuine stateful/NGFW feature where a firewall checks a file's hash against a cloud database of known-good or known-malicious files before allowing it through.
• File retrospection (B) is a related feature (notably in Cisco AMP/Secure Endpoint) that re-evaluates files after delivery - if a file later becomes known-malicious, retrospection triggers an alert even though it previously passed inspection.

Memory tip: Think "reputation = before" (checked at the gate) and "retrospection = after" (looking back in time) - both relate to file analysis, not connection tracking.

Recommendation: Verify the source of this question. If it's from an official vendor exam guide (e.g., Cisco, Palo Alto), cross-reference the study material directly, as the answer key as presented (A, C) does not reflect industry-standard definitions of stateful firewall features.

No community discussion yet for this question.