Which of the following packets should NOT be dropped at a firewall protecting an organization's internal network?

The correct answer is D. Outbound packets with an external destination IP address. Outbound packets from internal hosts destined for external (internet) IP addresses represent normal, legitimate user traffic and should be allowed. The other three choices are all attack vectors that should be blocked: (A) inbound packets with the Source Routing option set…

Submitted by anna_se· Apr 18, 2026Network and Communications Security

Question

Which of the following packets should NOT be dropped at a firewall protecting an organization's internal network?

Options

AInbound packets with Source Routing option set
BRouter information exchange protocols
CInbound packets with an internal address as the source IP address
DOutbound packets with an external destination IP address

How the community answered

(37 responses)

A
5% (2)
B
3% (1)
C
14% (5)
D
78% (29)

Explanation

Outbound packets from internal hosts destined for external (internet) IP addresses represent normal, legitimate user traffic and should be allowed. The other three choices are all attack vectors that should be blocked: (A) inbound packets with the Source Routing option set allow an attacker to dictate the packet's path and bypass security controls; (B) router information exchange protocols (e.g., RIP, OSPF) arriving from outside the network could be used to poison internal routing tables; (C) inbound packets with an internal source IP address are spoofed - no legitimate external host should appear to originate from inside your network.

Topics

#Firewall Rules#Packet Filtering#Network Security Best Practices#IP Spoofing

Community Discussion

No community discussion yet for this question.

Full SSCP Practice