Which of the following filtering rules of the firewall is considered a stateful rule ?
A) If source IP = 172.16.x.x to 172.31.x.x or 192.168.x.x, then drop the packet.
B) If TCP destination port = 21, then drop the packet. ‏
C) If the URL = www.darkspace.xxx, then drop the packet.‏
D) If destination IP = 161.154.23.59 and TCP port = 80, then pass the packet.
E) If the source and destination sockets of an arriving packet match those of a session established, then pass the packet.

Question

Which of the following filtering rules of the firewall is considered a stateful rule ?
A) If source IP = 172.16.x.x to 172.31.x.x or 192.168.x.x, then drop the packet.
B) If TCP destination port = 21, then drop the packet. ‏
C) If the URL = www.darkspace.xxx, then drop the packet.‏
D) If destination IP = 161.154.23.59 and TCP port = 80, then pass the packet.
E) If the source and destination sockets of an arriving packet match those of a session established, then pass the packet.

Quizplus · Accepted Answer

Stateful filtering rules track the state of a connection, which means they monitor traffic to ensure that it belongs to an established connection. Option E is the only choice that mentions a session established, indicating that it is a stateful rule. The other options are static rules that do not consider the state of the connection.

Which of the Following Filtering Rules of the Firewall Is