GSEC · Question #323
Which of the following correctly describes a stateless packet filter?
The correct answer is B. Data is passed through unchecked. A stateless packet filter inspects only packet headers against static rules without tracking connection state, meaning the payload content effectively passes unchecked.
Question
Which of the following correctly describes a stateless packet filter?
Options
- AStreams are rebuilt for analysis
- BData is passed through unchecked
- CPacket processing is very slow
- DSecurity is verified at the application level
How the community answered
(27 responses)- A7% (2)
- B78% (21)
- C4% (1)
- D11% (3)
Why each option
A stateless packet filter inspects only packet headers against static rules without tracking connection state, meaning the payload content effectively passes unchecked.
Rebuilding streams for analysis describes stateful or deep packet inspection firewalls, which reassemble TCP sessions to analyze context and content.
Stateless packet filters evaluate each packet in isolation using basic header fields such as source/destination IP and port, but do not inspect payload content or maintain session context. Because no deep content analysis or state tracking occurs, the data portion of packets passes through without content-level verification, making this the most accurate description among the choices.
Stateless packet filtering is actually very fast precisely because it performs only simple header comparisons with no state table lookups.
Verifying security at the application level describes an application-layer firewall or Web Application Firewall (WAF), which operates at OSI Layer 7.
Concept tested: Stateless packet filter characteristics vs. stateful inspection
Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-state-firewall.html
Topics
Community Discussion
No community discussion yet for this question.