What is the SPI firewall rule for packets that only have their TCP ACK bits set but no other flags set?
A) Drop the packet unless it is permitted by an ACL
B) Pass the packet unless it is forbidden by an ACL
C) Pass the packet if it is part of a previously approved connection
D) Either A or B

Question

Quizplus · Accepted Answer

Stateful Packet Inspection (SPI) firewalls track the state of network connections and allow packets that are part of an established connection. A packet with only the TCP ACK bit set is typically part of an ongoing conversation, so it would be passed if it matches a previously approved connection.

What Is the SPI Firewall Rule for Packets That Only