Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 5 Discussion

Actual exam question for Isaca's Cybersecurity-Audit-Certificate exam

Question #: 5
Topic #: 1

[All Cybersecurity-Audit-Certificate Questions]

Which of the following is a feature of a stateful inspection firewall?

AIt tracks the destination IP address of each packet that leaves the organization's internal network.

BIt is capable of detecting and blocking sophisticated attacks

CIt prevents any attack initiated and originated by an insider.

DIt translates the MAC address to the destination IP address of each packet that enters the organization's internal network.

Show Suggested Answer

Suggested Answer: B

A feature of a stateful inspection firewall is that it iscapable of detecting and blocking sophisticated attacks. A stateful inspection firewall is a type of firewall that monitors and analyzes the state and context of network traffic. It keeps track of the source, destination, protocol, port, and session information of each packet and compares it with a set of predefined rules. A stateful inspection firewall can detect and block attacks that exploit the logic or behavior of network protocols or applications, such as fragmentation attacks, session hijacking, or application-layer attacks.

by Selma at Oct 03, 2023, 04:25 PM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Minna

3 months ago

Wait, are we sure about B? I thought firewalls just filter traffic.

upvoted 0 times

...

Adela

3 months ago

D sounds off, MAC to IP translation isn't a firewall feature.

upvoted 0 times

...

Junita

4 months ago

I thought stateful firewalls could prevent insider attacks too?

upvoted 0 times

...

Mila

4 months ago

A is not correct, it doesn't track just the destination IP.

upvoted 0 times

...

Laura

4 months ago

Definitely B, it can block sophisticated attacks.

upvoted 0 times

...

Melita

4 months ago

I vaguely recall that stateful firewalls do more than just block attacks from insiders, so I don't think option C is correct.

upvoted 0 times

...

Lilli

4 months ago

I’m a bit confused about option A; I thought it was more about tracking the state of connections rather than just the destination IP.

upvoted 0 times

...

Jonelle

4 months ago

I think option B sounds familiar because we discussed how stateful firewalls can detect more complex threats compared to stateless ones.

upvoted 0 times

...

Ludivina

5 months ago

I remember studying that stateful inspection firewalls keep track of active connections, but I'm not sure which option reflects that feature.

upvoted 0 times

...

Mica

5 months ago

I'll go with option A. Tracking the destination IP seems like a common feature of stateful inspection firewalls.

upvoted 0 times

...

Barabara

5 months ago

Okay, let's see. I know stateful inspection firewalls track connection state, so that's probably the key here.

upvoted 0 times

...

Noelia

5 months ago

Hmm, I'm not too sure about the differences between the firewall types. Let me think this through carefully.

upvoted 0 times

...

Haley

5 months ago

This question seems straightforward, I think I can handle it.

upvoted 0 times

...

Rasheeda

5 months ago

Wait, is it about what the firewall does or what it's capable of? I'm a bit confused on the details.

upvoted 0 times

...

Cristy

5 months ago

Okay, let me think this through step-by-step. The Task table is the central table, so I need to identify which other tables are directly connected to it.

upvoted 0 times

...

Candida

5 months ago

Hmm, I'm a bit confused by the options. I'll need to review my notes on the product search functionality to figure out which one is the most efficient and scalable.

upvoted 0 times

...