Huawei H12-821_V1.0 Exam - Topic 2 Question 78 Discussion

Actual exam question for Huawei's H12-821_V1.0 exam

Question #: 78
Topic #: 2

When a packet passes through a firewall, the firewall creates a session connection for the packet to guide subsequent forwarding of the packet. However, the firewall does not create session entries for all packets. For which of the following packets does the firewall not create session entries when the packet reaches the firewall?

AICMP ping packet

BGRE packet

CSubsequent fragment

DUDP packet

Show Suggested Answer

Suggested Answer: C

Comprehensive and Detailed Step-by-Step

Session Creation in Firewalls:

Firewalls create session entries for packets requiring stateful inspection (e.g., TCP, UDP, ICMP, and GRE).

Subsequent fragments of large packets do not require new sessions. Instead, they are processed based on the session created for the first fragment.

Correct Option:

C (Subsequent Fragment): Does not trigger a new session entry as it belongs to an existing session.

HCIA-Datacom Study Guide, Chapter: Firewall Session Handling

Huawei Fragmentation Processing in Firewalls

by Vi at Feb 07, 2025, 09:18 AM

Limited Time Offer

25%

Off

Get Premium H12-821_V1.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erick

10 months ago

UDP packets usually do create sessions, though.

upvoted 0 times

...

Micah

10 months ago

GRE packets also don’t get session entries, right?

upvoted 0 times

...

Hobert

10 months ago

Wait, really? I thought all packets got tracked somehow.

upvoted 0 times

...

Cecil

11 months ago

Totally agree, it’s just how firewalls handle them.

upvoted 0 times

...

Herman

11 months ago

ICMP ping packets don’t create session entries.

upvoted 0 times

...

Maira

11 months ago

I'm leaning towards UDP packets not having session entries, but I feel like I've seen conflicting information on that in practice exams.

upvoted 0 times

...

Corinne

11 months ago

If I recall correctly, subsequent fragments don't get session entries either, but I could be mixing that up with something else we studied.

upvoted 0 times

...

Carmelina

11 months ago

I remember discussing GRE packets in class, and I think they might not create session entries either. It's a bit fuzzy for me though.

upvoted 0 times

...

Kathrine

12 months ago

I think the firewall doesn't create session entries for ICMP packets, but I'm not entirely sure. It seems like a common topic in our practice questions.

upvoted 0 times

...

Lennie

12 months ago

I feel pretty confident about this one. Firewalls don't create session entries for ICMP ping packets and GRE packets, since those are connectionless protocols. I'll mark those down as my answer.

upvoted 0 times

...

Nu

12 months ago

Okay, I've got this. The key is understanding that firewalls don't create session entries for certain types of packets, like ICMP and subsequent fragments. I'll make sure to remember that for the exam.

upvoted 0 times

...

Cristal

12 months ago

Hmm, I'm a bit confused on this one. I know firewalls create session entries, but I'm not sure which packets they don't create entries for. I'll have to review my notes on firewall behavior.

upvoted 0 times

...

Margot

12 months ago

This seems like a tricky question. I'll need to think carefully about the different types of packets and how firewalls handle them.

upvoted 0 times

...

Julio

2 years ago

I'm going with D. UDP packets are connectionless, so the firewall doesn't need to create a session for them. Although, if it's a UDP-based game, the firewall might have to make an exception to avoid lag.

upvoted 0 times

Glenn

1 year ago

D) UDP packet

upvoted 0 times

...

Dick

1 year ago

C) Subsequent fragment

upvoted 0 times

...

Fredric

1 year ago

B) GRE packet

upvoted 0 times

...

Lizette

1 year ago

A) ICMP ping packet

upvoted 0 times

...

Adelle

2 years ago

Hmm, I'm pretty sure it's B. GRE packets are used for tunneling, so the firewall wouldn't need to create a session for those.

upvoted 0 times

Emile

2 years ago

B) GRE packet

upvoted 0 times

...

Willis

2 years ago

A) ICMP ping packet

upvoted 0 times

...

Monroe

2 years ago

But what about GRE packets? I'm not sure if the firewall creates session entries for those.

upvoted 0 times

...

Yolando

2 years ago

I agree with Lasandra. UDP packets are connectionless, so it makes sense that the firewall wouldn't create session entries for them.

upvoted 0 times

...

Gail

2 years ago

I think the answer is C. The firewall doesn't create session entries for subsequent fragments, as it needs to reassemble the entire packet before processing it.

upvoted 0 times