GSLC · Question #470
Which of the following types of firewall ensures that the packets are part of the established session?
The correct answer is A. Stateful inspection firewall. Stateful inspection firewalls maintain a connection state table and validate that each incoming packet belongs to an already-established, legitimate session.
Question
Which of the following types of firewall ensures that the packets are part of the established session?
Options
- AStateful inspection firewall
- BCircuit-level firewall
- CSwitch-level firewall
- DApplication-level firewall
How the community answered
(37 responses)- A92% (34)
- B5% (2)
- C3% (1)
Why each option
Stateful inspection firewalls maintain a connection state table and validate that each incoming packet belongs to an already-established, legitimate session.
A stateful inspection firewall tracks the full state of active TCP/UDP connections in a state table and cross-checks every packet against that table. Packets that do not correspond to a known, established session are dropped, preventing spoofed or out-of-sequence traffic from passing through.
A circuit-level firewall validates the TCP three-way handshake to approve a session but does not continue monitoring the state of individual packets flowing through that session afterward.
Switch-level firewall is not a recognized firewall classification; network switches operate at OSI Layer 2 (data link) and do not perform stateful connection tracking.
An application-level (proxy) firewall inspects the content of application-layer protocols such as HTTP or FTP for policy compliance, which is a different function from tracking whether packets belong to an established network session.
Concept tested: Stateful inspection firewall session-state tracking
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.