Exam 200-201 topic 1 question 17 discussion

Answer D is correct Deep packet operates on layer 7 while statefull operates on layer 4 so A and C are incorrect as the methodes don't work on the same layer. B is incorrect because statefull doesn't do anything with contents.

The main difference between deep packet inspection and stateful inspection is the layer of the network stack at which they operate. Stateful inspection works at the transport layer (Layer 4) of the network stack, and it verifies that the contents of each packet are allowed based on the state of the connection. It does this by keeping track of the state of each connection, and only allowing packets that match an established connection to pass through. Stateful inspection can provide basic security against network attacks, such as denial-of-service attacks and spoofing attacks. Deep packet inspection, on the other hand, operates at the application layer (Layer 7) of the network stack. It inspects the contents of each packet in detail, looking for specific application-level information such as URLs, keywords, or file types. This allows it to identify and block specific types of traffic, such as malware or unwanted applications.

D. Deep packet inspection allows visibility on Layer 7 and stateful inspection allows visibility on Layer 4

Packet inspection does not verify connections, it inspects them, that's why D is correct and B is not.

D IS CORRECT LAYER 7 IS THE SITE TO SITE PROVIDE APPLICATION CONNECTION STATEFUL /LAYER 4