700-765 · Question #23
Which are two main features of Stateful Firewalling? (Choose two.)
The correct answer is A. Clientless lagging C. Full VX LAN support. Stateful firewalling tracks active connection state to make context-aware policy decisions, with clientless session logging and VXLAN overlay network support being two features associated with modern stateful firewall deployments.
Question
Which are two main features of Stateful Firewalling? (Choose two.)
Options
- AClientless lagging
- BFile retrospection
- CFull VX LAN support
- DFile reputation
How the community answered
(31 responses)- A90% (28)
- B6% (2)
- D3% (1)
Why each option
Stateful firewalling tracks active connection state to make context-aware policy decisions, with clientless session logging and VXLAN overlay network support being two features associated with modern stateful firewall deployments.
Clientless logging allows a stateful firewall to record session state and connection metadata without requiring a dedicated client agent on endpoints, supporting traffic auditing and compliance monitoring.
File retrospection is a Cisco Advanced Malware Protection (AMP) capability that re-evaluates previously observed files when new threat intelligence emerges, and is not a stateful firewalling function.
Full VXLAN support extends stateful inspection into virtualized and cloud network overlays, allowing the firewall to enforce connection-state policies on encapsulated traffic in modern data center environments.
File reputation is a threat intelligence feature used by AMP and Talos to score files based on known malware indicators, not a connection-state tracking capability of a stateful firewall.
Concept tested: Stateful firewall features - logging and VXLAN support
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.