How will a stateful packet inspection (SPI)firewall handle a packet containing a TCP FIN segment?
A)process it through the Access Control List (ACL)
B)pass it if it is part of an approved connection
C)both A and B
D)neither A nor B

Question

Quizplus · Accepted Answer

A stateful packet inspection (SPI) firewall maintains a record of the state of the connection that it is monitoring. When a packet containing a TCP FIN segment is received, the firewall will check whether it is part of an approved connection. If it is, the firewall will pass the packet through; otherwise, it will be dropped. There is no need to process it through the Access Control List (ACL) as the firewall already knows the context of the connection. Therefore, the correct answer is B, which states that the packet will be passed if it is part of an approved connection.

How Will a Stateful Packet Inspection (SPI)firewall Handle a Packet