3.2 Explain the Function of Stateful Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is considering replacing its stateless firewall with a stateful firewall. The network has a mix of TCP and UDP traffic. The security team is concerned about the performance impact of stateful inspection. What is the primary performance consideration they should evaluate?

   • AStateful firewalls must decrypt all traffic to inspect it, which adds latency.
   • BStateful firewalls are slower than stateless firewalls because they must perform deep packet inspection on every packet.
   • CStateful firewalls cannot handle UDP traffic because it is connectionless.
   • DStateful firewalls require more memory and CPU to maintain the state table and inspect each packet.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team is evaluating an NGFW for its ability to block zero-day exploits. The NGFW has signature-based intrusion prevention, but the team is concerned about unknown threats. What additional feature of the NGFW can help mitigate zero-day exploits?

   • AUser identification
   • BApplication identification
   • CStateful inspection
   • DThreat intelligence feeds
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   Why is application awareness important for policy enforcement in an NGFW?

   • AIt speeds up the firewall's processing of packets.
   • BIt allows policies to be based on the application, not just the port.
   • CIt eliminates the need for user authentication.
   • DIt automatically encrypts all application traffic.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator is configuring a stateful firewall to allow FTP traffic. FTP uses two channels: a control channel on port 21 and a data channel on a dynamically assigned port. What must the firewall do to allow the data channel?

   • AConfigure the firewall to allow all traffic from the FTP server's IP address.
   • BCreate a rule to allow all traffic on ports above 1024.
   • CUse an application-level gateway (ALG) to inspect the control channel and dynamically open the data channel.
   • DCreate a static rule to allow all traffic on port 21.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization wants to deploy a firewall that can identify and control applications regardless of the port they use, and also enforce policies based on user identity. Which type of firewall should they choose?

   • AA proxy server that caches web content and filters URLs.
   • BA stateless firewall that filters based on IP addresses and ports.
   • CA stateful firewall that tracks connections and allows return traffic.
   • DA next-generation firewall (NGFW) that includes application identification and user identification features.
   Reveal Solution Discussion Select an answer first