When a packet that is part of an ongoing connection arrives at a stateful inspection firewall,the firewall usually ________.
A) drops the packet
B) drops the packet and notifies an administrator
C) passes the packet
D) passes the packet, but notifies an administrator

Question

Quizplus · Accepted Answer

A stateful inspection firewall keeps track of the state of ongoing connections. So, when a packet that is part of an ongoing connection arrives at such a firewall, the firewall usually passes the packet through after checking that it matches the expected state of the connection. Therefore, option C is the best choice as it correctly states that the packet is usually passed through. Options A and B are not correct because dropping the packet would break the ongoing connection, and notifying an administrator may not be necessary for every packet. Option D suggests that the firewall would pass the packet but notify an administrator which may not be necessary for every packet either.

When a Packet That Is Part of an Ongoing Connection