Soru

Zorluk: KolayFirewalls and Access Control Lists (ACLs)

A network administrator is reviewing basic firewall operations and Access Control List (ACL) filtering rules. Which of the following statements correctly describe how these security mechanisms function? (Select TWO.)

  1. Stateful firewalls maintain a connection table to dynamically allow return traffic for established sessions.Cevap
  2. Standard IPv4 Access Control Lists evaluate network traffic based strictly on the source IP address.Cevap
  3. C
    Stateless Access Control Lists automatically track TCP connection states to allow return traffic without dedicated rules.
  4. D
    Access Control Lists implicitly permit all remaining traffic at the end of the rule list unless an explicit deny statement is added.

Cevap

The correct statements are that stateful firewalls maintain a connection table to dynamically allow return traffic for established sessions, and standard IPv4 Access Control Lists evaluate network traffic based strictly on the source IP address.
Stateful firewalls track session state information in a state table, allowing return traffic automatically. Additionally, standard ACLs filter traffic solely by inspecting the source IP address of packets.

Adım Adım Çözüm

1
Analyze firewall session tracking behavior
Stateful firewalls keep state tables recording active outgoing connections (such as source/destination IP and port pairs), which allows incoming response traffic automatically.
This differentiates stateful inspection from simple packet filtering.
2
Differentiate standard vs. extended IPv4 ACL capabilities
Standard IPv4 ACLs (typically numbered 1–99) look only at the source IP address in the packet header.
They lack the ability to inspect destination IPs, protocols, or port numbers.
3
Evaluate distractors regarding stateless inspection and ACL default behavior
Stateless filters do not track session state, and ACLs conclude with an implicit deny rule rather than an implicit permit.
Understanding these baseline security properties prevents accidental exposure of network segments.

Anahtar Kavram

Firewall Statefulness and Standard ACL Characteristics
Bu soruyu puanla