Huawei Exam H12-821_V1.0 Topic 1 Question 42 Discussion

Actual exam question for Huawei's H12-821_V1.0 exam

Question #: 42
Topic #: 1

Which of the following statements regarding the stateful inspection firewall is true?

AWhen the stateful inspection firewall checks packets, packets of one same connection are not correlated.

BBecause UDP is a connectionless protocol, so the stateful inspection firewall cannot match UDP packets with the status table.

CThe stateful inspection firewall only needs to match the first data packet against a rule, and the subsequent packets of the connection are matched directly in the state table.

DThe stateful inspection firewall needs to match the rules for each incoming packet.

Show Suggested Answer

Suggested Answer: A

by Erick at Jul 05, 2023, 09:48 PM

Limited Time Offer

25%

Off

Get Premium H12-821_V1.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nelida

8 hours ago

Man, I'm glad I read through the options carefully. If I just saw 'stateful firewall' and picked the first answer, I would have been way off base. This stuff really requires understanding the core concepts.

upvoted 0 times

...

Hildegarde

1 days ago

Option D sounds like it would be super inefficient. Matching every single packet against the full rule set? No way, that's not how a stateful firewall works at all.

upvoted 0 times

...

Viola

4 days ago

Haha, option A is pretty funny. Of course the stateful firewall correlates packets of the same connection, that's the whole reason it's called 'stateful'!

upvoted 0 times

...

Shawnda

10 days ago

I was a bit confused by option B. Just because UDP is connectionless, it doesn't mean the stateful firewall can't track and match UDP packets based on the connection state. That's kind of the whole point of stateful inspection!

upvoted 0 times

...

Galen

12 days ago

But C makes sense because it would be more efficient to match subsequent packets directly in the state table.

upvoted 0 times

...

Gearldine

13 days ago

Option C seems to be the correct answer. The stateful inspection firewall keeps track of the connection state, so it only needs to match the first packet against the rules, and then can quickly match subsequent packets in the state table.

upvoted 0 times

...