nerdexam
(ISC)2

CISSP-ISSAP · Question #84

You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to keep track of the state

The correct answer is A. Stateful firewall. Stateful firewalls (A) are designed specifically to track the state of network connections - monitoring active sessions and making decisions based on connection context (e.g., whether a packet belongs to an established, related, or new connection) - which directly satisfies the r

Infrastructure Security

Question

You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to keep track of the state of network connections traveling across the network. Which of the following types of firewalls will you configure to accomplish the task?

Options

  • AStateful firewall
  • BHost-based application firewall
  • CA network-based application layer firewall
  • DAn application firewall

How the community answered

(36 responses)
  • A
    92% (33)
  • B
    6% (2)
  • D
    3% (1)

Explanation

Stateful firewalls (A) are designed specifically to track the state of network connections - monitoring active sessions and making decisions based on connection context (e.g., whether a packet belongs to an established, related, or new connection) - which directly satisfies the requirement. Option D (application firewall) inspects application-layer traffic but does not inherently track connection state. Option C (network-based application layer firewall) operates at Layer 7 to filter application traffic, also without native state tracking as its primary function. Option B (host-based application firewall) runs on individual hosts to control per-application traffic, making it the wrong scope (host-level, not network-wide) for this scenario.

Memory tip: Think of "stateful" as the firewall having memory - it remembers the state of each connection, just like a bouncer who tracks who already got in versus who is trying to sneak through a new door.

Topics

#Stateful Firewall#Connection State Tracking#Firewall Configuration#Linux Network Security

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice