a. Why are stateful packet inspection (SPI) firewalls attractive?

25a.) Stateful packet inspection firewalls are attractive because of their _________.

a. Low cost for a given traffic volume

b. Ability to base rules on specific application programs

c. Both A and B

d. Neither A nor B

b. What are the two states in connections for SPI firewalls?

c. Which state needs the most security protection? Why?

25c1.) When a packet that is part of an ongoing connection arrives at a stateful inspection firewall, the firewall usually _________.

a. Drops the packet only

b. Drops the packet and notifies an administrator

c. Passes the packet only

d. Passes the packet, but notifies an administrator

25c2.) When a packet that is not part of an ongoing connection and that does not attempt to open a connection arrives at a stateful inspection firewall, the firewall _________. (Read this question carefully.)

a. Drops the packet

b. Passes the packet

c. Opens a new connection

d. Does not approve the connection

25c3.) How will a stateful packet inspection (SPI) firewall handle a packet containing a TCP segment that contains an acknowledgement?

a. Process it through the Access Control List (ACL)

b. Pass it if it is part of an approved connection

c. Both A and B

d. Neither A nor B

d. Why are SPI firewalls economical?

25d.) SPI firewalls are attractive because of their _________.

a. Ability to do antivirus filtering

b. Ability to filter complex application content

c. QoS guarantees

d. Low cost

e. What type of firewall do most corporations use for their main border firewalls?

25e.) _________ is the dominant firewall filtering method used on main border firewalls today.

a. ACL filtering

b. Application content filtering

c. Stateful packet inspection

d. NGFW