Examkin

Question

Difficulty: EasyFirewalls and Access Control Lists (ACLs)

A network administrator is reviewing filtering methods for perimeter security devices. Which of the following statements accurately describe the operational behavior of stateless firewalls and standard packet filters? (Select TWO)

  1. They evaluate each network packet independently using static criteria such as source/destination IP addresses and port numbers.Answer
  2. They require separate explicit rules to permit return traffic because connection state context is not retained.Answer
  3. C
    They dynamically track TCP session state tables to automatically allow return traffic for outbound requests.
  4. D
    They automatically permit all inbound HTTP traffic on port 80 without checking ACL statements if port 443 is explicitly allowed.

Answer

Stateless firewalls evaluate each packet independently against static rules (such as IP addresses and port numbers) and require separate explicit rules for return traffic because they do not track connection session state.
Stateless firewalls assess each packet on its own using header fields (IP addresses, protocols, port numbers) without maintaining state tables. As a result, return traffic generated from internal requests is not automatically recognized and requires an explicit matching permit rule.

Step-by-Step Solution

1
Analyze how stateless firewalls process traffic packets.
Stateless firewalls inspect each packet individually against configured access rules without storing state tables or session context.
Stateless filtering operates at Layers 3 and 4, checking header information on a per-packet basis.
2
Determine the impact of stateless processing on return traffic flows.
Because no state table exists to identify return packets belonging to established connections, explicit rules must be defined in both directions.
Without dynamic state tracking, return traffic is evaluated like any new incoming packet.

Key Concept

Stateless Firewall Packet Inspection & Rule Processing
Rate this question

Topics

Firewalls and Access Control Lists (ACLs)

More questions from this topic