Huawei Exam H12-821_V1.0 Topic 2 Question 78 Discussion

Actual exam question for Huawei's H12-821_V1.0 exam

Question #: 78
Topic #: 2

When a packet passes through a firewall, the firewall creates a session connection for the packet to guide subsequent forwarding of the packet. However, the firewall does not create session entries for all packets. For which of the following packets does the firewall not create session entries when the packet reaches the firewall?

AICMP ping packet

BGRE packet

CSubsequent fragment

DUDP packet

Show Suggested Answer

Suggested Answer: C

Comprehensive and Detailed Step-by-Step

Session Creation in Firewalls:

Firewalls create session entries for packets requiring stateful inspection (e.g., TCP, UDP, ICMP, and GRE).

Subsequent fragments of large packets do not require new sessions. Instead, they are processed based on the session created for the first fragment.

Correct Option:

C (Subsequent Fragment): Does not trigger a new session entry as it belongs to an existing session.

HCIA-Datacom Study Guide, Chapter: Firewall Session Handling

Huawei Fragmentation Processing in Firewalls

by Vi at Feb 07, 2025, 09:18 AM

Limited Time Offer

25%

Off

Get Premium H12-821_V1.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

1 months ago

Hmm, I'm pretty sure it's B. GRE packets are used for tunneling, so the firewall wouldn't need to create a session for those.

upvoted 0 times

Emile

27 days ago

B) GRE packet

upvoted 0 times

...

Willis

1 months ago

A) ICMP ping packet

upvoted 0 times

...

Monroe

2 months ago

But what about GRE packets? I'm not sure if the firewall creates session entries for those.

upvoted 0 times

...

Yolando

2 months ago

I agree with Lasandra. UDP packets are connectionless, so it makes sense that the firewall wouldn't create session entries for them.

upvoted 0 times

...

2 months ago

I think the firewall does not create session entries for UDP packets.

upvoted 0 times

...