3.2 Explain the Function of Stateful Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is using a stateless firewall to protect its network. An attacker is sending packets with spoofed source IP addresses to bypass the firewall's rules. Why is the stateless firewall vulnerable to this type of attack?

   • AIt cannot block traffic from specific IP addresses.
   • BIt cannot inspect the payload of packets to detect malicious content.
   • CIt does not track the state of connections, so it cannot verify that the packets are part of a legitimate session.
   • DIt does not have a state table, so it cannot log traffic.
   Reveal Solution Discussion Select an answer first
2. 22foundation · medium

   A user on an internal network initiates a web request to an external server. How does the state table enable the response to be allowed back into the network?

   • AThe firewall forwards all traffic from the external server because it is a trusted source.
   • BThe firewall records the outbound connection and matches the response to that entry.
   • CThe firewall requires the external server to authenticate before sending the response.
   • DThe firewall creates an inbound rule automatically for the destination IP.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security team wants to deploy a firewall that can not only filter traffic but also detect and block known malware and exploit attempts in real time. Which feature of an NGFW is most relevant to this requirement?

   • AIntegrated threat prevention
   • BApplication identification
   • CStateful inspection
   • DUser identification
   Reveal Solution Discussion Select an answer first
5. 24foundation · medium

   What is the primary purpose of signature-based intrusion prevention in an NGFW?

   • ATo block traffic based on known attack patterns.
   • BTo identify users based on their IP addresses.
   • CTo encrypt all traffic passing through the firewall.
   • DTo balance network load across servers.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to enforce different internet access policies for different departments. For example, the marketing department should have access to social media, but the finance department should not. Employees use dynamic IP addresses from a DHCP server. How can an NGFW enforce these policies?

   • ABy creating firewall rules based on the IP address ranges assigned to each department.
   • BBy configuring the firewall to block all social media traffic and then creating exceptions for the marketing department.
   • CBy integrating with the company's directory service to identify users and apply policies based on group membership.
   • DBy using a stateless firewall to filter traffic based on the source MAC address.
   Reveal Solution Discussion Select an answer first