3.2 Explain the Function of Stateful Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   How does a stateless packet filter differ from a stateful firewall in handling an inbound packet that is part of a response to an outbound request?

   • AA stateless filter uses the state table to allow the packet; a stateful firewall requires an explicit rule.
   • BA stateless filter decrypts the packet; a stateful firewall does not.
   • CBoth use the same method: they inspect the packet header and compare to a rule set.
   • DA stateless filter requires an explicit inbound rule; a stateful firewall uses the connection state to allow it.
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Which statement best describes the evolution from traditional firewalls to NGFWs?

   • ANGFWs add application and user awareness to the existing stateful inspection foundation.
   • BNGFWs are only used in cloud environments.
   • CNGFWs replaced the need for stateful inspection.
   • DNGFWs do not use port-based rules at all.
   Reveal Solution Discussion Select an answer first
4. 18foundation · medium

   How does an NGFW typically obtain user identity information for policy enforcement?

   • ABy integrating with a directory service such as Active Directory.
   • BBy analyzing the content of emails.
   • CBy requiring users to register with the firewall.
   • DBy reading the username from the IP packet header.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security administrator is reviewing the state table of a firewall and notices that a session is in the 'established' state. What does this indicate about the session?

   • AThe session has been terminated and is being removed from the table.
   • BThe session is being inspected for malware.
   • CThe session has completed the TCP handshake and is active.
   • DThe session is waiting for the initial SYN packet.
   Reveal Solution Discussion Select an answer first
6. 20foundation · medium

   What is a benefit of enforcing policies based on user identity rather than just IP address?

   • AIt speeds up the firewall's processing.
   • BIt eliminates the need for firewall rules.
   • CIt allows policies to follow the user regardless of the device or IP address.
   • DIt automatically encrypts all user traffic.
   Reveal Solution Discussion Select an answer first