2.2 Explain the Function of Stateless Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which characteristic best describes how a stateless firewall processes network traffic?

   • AIt evaluates each packet independently against a set of static rules.
   • BIt uses heuristics to identify and block unknown threats in real time.
   • CIt reassembles packets to inspect the full application-layer payload.
   • DIt maintains a session table to track the state of active connections.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network engineer is configuring a stateless firewall to allow inbound HTTPS traffic to a web server. The firewall has a rule to allow TCP port 443 from any source to the web server. However, the web server is not receiving the traffic. What is the most likely reason for this failure?

   • AThe firewall is blocking the traffic because the web server's IP address is not in the rule.
   • BThe firewall is blocking the traffic because it cannot identify the user accessing the web server.
   • CThe firewall is also blocking the return traffic because it does not track the connection state and needs a separate rule for outbound traffic.
   • DThe firewall is performing deep packet inspection on the HTTPS traffic and blocking it because it is encrypted.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying an NGFW and wants to block a specific exploit that targets a vulnerability in a web application. The exploit uses a unique string in the HTTP request. Which NGFW feature is specifically designed to detect and block this type of threat?

   • AIntrusion prevention, which uses signatures to detect and block known exploit patterns.
   • BApplication identification, which identifies the web application being used.
   • CUser identification, which authenticates the user making the request.
   • DURL filtering, which blocks access to specific URLs.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is using a stateless firewall to protect its internal network. The security team discovers that an attacker is using a technique where they send a packet with the RST flag set to close a legitimate TCP connection between two internal hosts. The attacker is spoofing the source IP address of one of the hosts. Why is the stateless firewall unable to prevent this attack?

   • AIt cannot block RST packets because they are a legitimate part of the TCP protocol.
   • BIt cannot identify the attacker because the source IP is spoofed.
   • CIt cannot inspect the payload of the RST packet to determine if it is malicious.
   • DIt cannot determine that the RST packet is not part of the legitimate connection because it does not track connection state.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A small ISP uses a stateless firewall to filter traffic between customers and the internet. A customer reports that their VoIP calls intermittently fail, while web browsing works fine. The firewall's rule base only contains static rules for IP addresses and port numbers. What is the most likely reason for the VoIP failures?

   • AThe stateless firewall cannot track the dynamic UDP ports used by the VoIP signaling and media streams, so return traffic is dropped.
   • BThe stateless firewall is rate-limiting all UDP traffic to prevent denial-of-service attacks, which throttles the voice streams.
   • CThe stateless firewall is performing deep packet inspection on the VoIP payload and blocking encrypted signaling.
   • DThe stateless firewall is blocking the VoIP traffic because it cannot identify the user making the call.
   Reveal Solution Discussion Select an answer first