Stateful firewalls are an example of which type of security method?

Question

Options

• Aproactive
• Breactive
• Cremediation
• Dmitigation

• A
  3% (2)
• C
  2% (1)
• D
  95% (58)

Explanation

Stateful firewalls are classified as mitigation because they reduce the risk and potential impact of attacks by tracking active connection states and filtering traffic based on context - they don't eliminate threats entirely, but they limit exposure by controlling what can reach protected resources.

Why the distractors are wrong:

• A (Proactive): Proactive security involves actively hunting for vulnerabilities before threats materialize (e.g., pen testing, threat modeling). Firewalls respond to traffic as it arrives rather than seeking out vulnerabilities.
• B (Reactive): Reactive measures respond after an incident occurs (e.g., incident response, forensics). A firewall operates continuously to reduce risk, not just in response to a breach.
• C (Remediation): Remediation means fixing damage or vulnerabilities after they've been exploited (e.g., patching a compromised system). A firewall is a preventive control, not a recovery action.

Memory tip: Think of "mitigation" as reducing risk without fully removing it - a firewall can't stop every attack, but it significantly limits what gets through. If a security control reduces the blast radius or likelihood of an attack, it's mitigation. Remediation = after-the-fact fix; reactive = after-the-fact response; proactive = seeking threats before they strike.

No community discussion yet for this question.