3.2 Explain the Function of Stateful Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network administrator is troubleshooting why a client can initiate a web request to a server, but the return traffic is being dropped by the firewall. The firewall is configured with a rule that allows outbound HTTP traffic from the client to the server. What is the most likely reason the return traffic is being dropped?

   • AThe firewall is stateless and does not track the connection, so it requires a separate inbound rule for the return traffic.
   • BThe return traffic is using a different protocol than the outbound traffic, so the firewall cannot associate it with the existing session.
   • CThe outbound rule is configured to allow only the SYN packet, not the subsequent packets of the TCP handshake.
   • DThe firewall's state table has reached its maximum capacity and is no longer able to record new sessions.
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   Which feature is typically integrated into a next-generation firewall (NGFW) to provide threat prevention?

   • AIntrusion prevention system (IPS)
   • BVPN concentrator
   • CProxy server
   • DLoad balancing
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   Which of the following best describes how a stateful firewall handles a packet that is part of an established connection?

   • AIt forwards the packet only if it matches a specific inbound allow rule.
   • BIt sends the packet to an external server for analysis before deciding.
   • CIt drops the packet because it is not the initial request.
   • DIt compares the packet against the state table and forwards it if the connection is valid.
   Reveal Solution Discussion Select an answer first
5. 4foundation · medium

   Which of the following is a key capability of a next-generation firewall (NGFW) beyond traditional stateful inspection?

   • AApplication identification and control
   • BMAC address filtering
   • CNetwork address translation (NAT)
   • DVirtual LAN (VLAN) segmentation
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's security policy prohibits the use of social media applications during work hours. Employees are using a web-based social media app that communicates over port 443, which is also used by legitimate business applications. How can an NGFW enforce this policy without blocking all HTTPS traffic?

   • ABy using a stateless firewall to filter packets based on the destination IP address of the social media site.
   • BBy blocking all traffic on port 443 during work hours.
   • CBy configuring a rule to allow only traffic from the company's IP address range.
   • DBy using application identification to recognize the social media app and block it specifically.
   Reveal Solution Discussion Select an answer first