Exam CISSP topic 1 question 336 discussion

D seems correct

Answer is D "A stateful firewall maintains context across all its current sessions, rather than treating each packet as an isolated entity, as is the case with a stateless firewall" https://www.techtarget.com/searchnetworking/definition/stateful-inspection

A describes packet filtering fw B describes circuit fw C describes packet filtering again D describes stateful

Answer is D https://www.checkpoint.com/cyber-hub/network-security/what-is-firewall/what-is-a-stateful-firewall/stateful_vs_stateless_firewall/#:~:text=A%20stateless%20firewall%20differs%20from,of%20inbound%20and%20outbound%20connections.

The correct answer is D. Stateful = Packets are filtered in context of the session Stateless = Packets are filtered without any context of previous packets in the session.

D is correct answer

The correct answer is D. Explanation: The key difference between a stateful packet inspection (SPI) firewall and a stateless packet filter firewall is that the SPI inspects the traffic in the context of a session, while the stateless packet filter firewall inspects traffic on a packet-by-packet basis without maintaining any context of previous packets in the session. An SPI firewall is designed to maintain a record of the state of active sessions and can make decisions based on the state of the session. For example, it can inspect the traffic in the context of a session and make decisions based on the traffic patterns seen within the session. This enables the firewall to identify and prevent attacks that may span multiple packets, such as denial-of-service attacks, which may be missed by stateless packet filter firewalls.

Stateless firewalls are designed to protect networks based on static information such as source and destination. Whereas stateful firewalls filter packets based on the full context of a given network connection, stateless firewalls filter packets based on the individual packets themselves. https://www.n-able.com/blog/stateful-vs-stateless-firewall-differences

A static packet-filtering firewall filters traffic by examining data from a message header. Usually, the rules are concerned with source and destination IP Adress (layer 3) and port numbers (layer 4). This is also a type of stateless firewall since each packet is evaluated individually rather than in context (which is performed by a stateful firewall).

D. The SPI inspects the traffic in the context of a session.

Stateless firewalls are designed to protect networks based on static information such as source and destination. Whereas stateful firewalls filter packets based on the full context of a given network connection, stateless firewalls filter packets based on the individual packets themselves. I go A

D, is the correct answer. Study guide E9, Page 552.

prefer D

Agree with D