Huawei H12-821_V1.0 Exam - Topic 2 Question 78 Discussion

Actual exam question for Huawei's H12-821_V1.0 exam

Question #: 78
Topic #: 2

When a packet passes through a firewall, the firewall creates a session connection for the packet to guide subsequent forwarding of the packet. However, the firewall does not create session entries for all packets. For which of the following packets does the firewall not create session entries when the packet reaches the firewall?

AICMP ping packet

BGRE packet

CSubsequent fragment

DUDP packet

Show Suggested Answer

Suggested Answer: C

Comprehensive and Detailed Step-by-Step

Session Creation in Firewalls:

Firewalls create session entries for packets requiring stateful inspection (e.g., TCP, UDP, ICMP, and GRE).

Subsequent fragments of large packets do not require new sessions. Instead, they are processed based on the session created for the first fragment.

Correct Option:

C (Subsequent Fragment): Does not trigger a new session entry as it belongs to an existing session.

HCIA-Datacom Study Guide, Chapter: Firewall Session Handling

Huawei Fragmentation Processing in Firewalls

by Vi at Feb 07, 2025, 09:18 AM

Limited Time Offer

25%

Off

Get Premium H12-821_V1.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erick

3 months ago

UDP packets usually do create sessions, though.

upvoted 0 times

...

Micah

3 months ago

GRE packets also don’t get session entries, right?

upvoted 0 times

...

Hobert

3 months ago

Wait, really? I thought all packets got tracked somehow.

upvoted 0 times

...

Cecil

4 months ago

Totally agree, it’s just how firewalls handle them.

upvoted 0 times

...

Herman

4 months ago

ICMP ping packets don’t create session entries.

upvoted 0 times

...

Maira

4 months ago

I'm leaning towards UDP packets not having session entries, but I feel like I've seen conflicting information on that in practice exams.

upvoted 0 times

...

Corinne

4 months ago

If I recall correctly, subsequent fragments don't get session entries either, but I could be mixing that up with something else we studied.

upvoted 0 times

...

Carmelina

4 months ago

I remember discussing GRE packets in class, and I think they might not create session entries either. It's a bit fuzzy for me though.

upvoted 0 times

...

Kathrine

5 months ago

I think the firewall doesn't create session entries for ICMP packets, but I'm not entirely sure. It seems like a common topic in our practice questions.

upvoted 0 times

...

Lennie

5 months ago

I feel pretty confident about this one. Firewalls don't create session entries for ICMP ping packets and GRE packets, since those are connectionless protocols. I'll mark those down as my answer.

upvoted 0 times

...

Nu

5 months ago

Okay, I've got this. The key is understanding that firewalls don't create session entries for certain types of packets, like ICMP and subsequent fragments. I'll make sure to remember that for the exam.

upvoted 0 times

...

Cristal

5 months ago

Hmm, I'm a bit confused on this one. I know firewalls create session entries, but I'm not sure which packets they don't create entries for. I'll have to review my notes on firewall behavior.

upvoted 0 times

...

Margot

5 months ago

This seems like a tricky question. I'll need to think carefully about the different types of packets and how firewalls handle them.

upvoted 0 times

...

Julio

12 months ago

I'm going with D. UDP packets are connectionless, so the firewall doesn't need to create a session for them. Although, if it's a UDP-based game, the firewall might have to make an exception to avoid lag.

upvoted 0 times

Glenn

11 months ago

D) UDP packet

upvoted 0 times

...

Dick

11 months ago

C) Subsequent fragment

upvoted 0 times

...

Fredric

11 months ago

B) GRE packet

upvoted 0 times

...

Lizette

11 months ago

A) ICMP ping packet

upvoted 0 times

...

Adelle

12 months ago

Hmm, I'm pretty sure it's B. GRE packets are used for tunneling, so the firewall wouldn't need to create a session for those.

upvoted 0 times

Emile

11 months ago

B) GRE packet

upvoted 0 times

...

Willis

11 months ago

A) ICMP ping packet

upvoted 0 times

...

Monroe

1 year ago

But what about GRE packets? I'm not sure if the firewall creates session entries for those.

upvoted 0 times

...

Yolando

1 year ago

I agree with Lasandra. UDP packets are connectionless, so it makes sense that the firewall wouldn't create session entries for them.

upvoted 0 times

...

Gail

1 year ago

I think the answer is C. The firewall doesn't create session entries for subsequent fragments, as it needs to reassemble the entire packet before processing it.

upvoted 0 times