nerdexam
(ISC)2(ISC)2

SSCP · Question #777

SSCP Question #777: Real Exam Question with Answer & Explanation

The correct answer is A: Network or Transport Layer.. Most stateful packet inspection firewalls work at the network or transport layers. For the TCP/IP protcol, this allows the firewall to make decisions both on IP addresses, protocols and TCP/UDP Application layer is incorrect. This is too high in the OSI stack for this type of fir

Submitted by lukas.cz· Apr 18, 2026Network and Communications Security

Question

In a stateful inspection firewall, data packets are captured by an inspection engine that is operating at the:

Options

  • ANetwork or Transport Layer.
  • BApplication Layer.
  • CInspection Layer.
  • DData Link Layer.

Explanation

Most stateful packet inspection firewalls work at the network or transport layers. For the TCP/IP protcol, this allows the firewall to make decisions both on IP addresses, protocols and TCP/UDP Application layer is incorrect. This is too high in the OSI stack for this type of firewall. Inspection layer is incorrect. There is no such layer in the OSI stack. "Data link layer" is incorrect. This is too low in the OSI stack for this type of firewall.

Topics

#Stateful Firewall#OSI Model#Network Security#Firewall Technologies

Community Discussion

No community discussion yet for this question.

Full SSCP PracticeBrowse All SSCP Questions