Discuss Isaca Cybersecurity-Audit-Certificate Exam Topic 1 Question 5

Which of the following is a feature of a stateful inspection firewall?

AIt tracks the destination IP address of each packet that leaves the organization's internal network.

BIt is capable of detecting and blocking sophisticated attacks

CIt prevents any attack initiated and originated by an insider.

DIt translates the MAC address to the destination IP address of each packet that enters the organization's internal network.

Suggested Answer: B

A feature of a stateful inspection firewall is that it iscapable of detecting and blocking sophisticated attacks. A stateful inspection firewall is a type of firewall that monitors and analyzes the state and context of network traffic. It keeps track of the source, destination, protocol, port, and session information of each packet and compares it with a set of predefined rules. A stateful inspection firewall can detect and block attacks that exploit the logic or behavior of network protocols or applications, such as fragmentation attacks, session hijacking, or application-layer attacks.

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Minna 11 months ago

Wait, are we sure about B? I thought firewalls just filter traffic.

Adela 11 months ago

D sounds off, MAC to IP translation isn't a firewall feature.

Junita 11 months ago

I thought stateful firewalls could prevent insider attacks too?

Mila 11 months ago

A is not correct, it doesn't track just the destination IP.

Laura 11 months ago

Definitely B, it can block sophisticated attacks.

Melita 12 months ago

I vaguely recall that stateful firewalls do more than just block attacks from insiders, so I don't think option C is correct.

Lilli 12 months ago

I’m a bit confused about option A; I thought it was more about tracking the state of connections rather than just the destination IP.

Jonelle 12 months ago

I think option B sounds familiar because we discussed how stateful firewalls can detect more complex threats compared to stateless ones.

Ludivina 1 year ago

I remember studying that stateful inspection firewalls keep track of active connections, but I'm not sure which option reflects that feature.

Mica 1 year ago

I'll go with option A. Tracking the destination IP seems like a common feature of stateful inspection firewalls.

Barabara 1 year ago

Okay, let's see. I know stateful inspection firewalls track connection state, so that's probably the key here.

Noelia 1 year ago

Hmm, I'm not too sure about the differences between the firewall types. Let me think this through carefully.

Haley 1 year ago

This question seems straightforward, I think I can handle it.

Rasheeda 1 year ago

Wait, is it about what the firewall does or what it's capable of? I'm a bit confused on the details.

Cristy 1 year ago

Okay, let me think this through step-by-step. The Task table is the central table, so I need to identify which other tables are directly connected to it.

Candida 1 year ago

Hmm, I'm a bit confused by the options. I'll need to review my notes on the product search functionality to figure out which one is the most efficient and scalable.

Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 5 Discussion