ISC2 SSCP Exam - Topic 6 Question 32 Discussion

Actual exam question for ISC2's SSCP exam

Question #: 32
Topic #: 6

[All SSCP Questions]

Which of the following statements pertaining to packet filtering is incorrect?

AIt is based on ACLs.

BIt is not application dependant.

CIt operates at the network layer.

DIt keeps track of the state of a connection.

Show Suggested Answer

Suggested Answer: D

Packet filtering is used in the first generation of firewalls and does not keep track of the state of a connection. Stateful packet filtering does.

Source: WALLHOFF, John, CISSP Summary 2002, April 2002, CBK#2 Telecommunications and Network Security (page 6)

by Angella at May 09, 2022, 07:53 PM

Limited Time Offer

25%

Off

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesusita

5 months ago

I thought it was application dependent, but I guess not!

upvoted 0 times

...

Martina

6 months ago

It definitely operates at the network layer.

upvoted 0 times

...

Krystal

6 months ago

Wait, it tracks connection states? That’s new to me.

upvoted 0 times

...

Tresa

6 months ago

Totally agree, it's not stateful!

upvoted 0 times

...

Ming

6 months ago

Packet filtering uses ACLs for rules.

upvoted 0 times

...

Angella

6 months ago

I could be wrong, but I think C is correct since packet filtering operates at the network layer, right?

upvoted 0 times

...

Flo

6 months ago

I practiced a similar question, and I think B is right because packet filtering doesn't depend on the application layer.

upvoted 0 times

...

Amber

6 months ago

I remember that packet filtering uses ACLs, so I think A is correct.

upvoted 0 times

...

Ryan

6 months ago

I'm not entirely sure, but I feel like D might be the one that's incorrect since it sounds more like stateful filtering.

upvoted 0 times

...

Elvis

6 months ago

I'm a bit confused by some of these choices. Is there a specific order we need to prioritize them in? I'd probably go with A, B, and D to cover the main bases, but I'm not 100% sure.

upvoted 0 times

...

Rex

6 months ago

Okay, I remember learning about COSO in class. They're the ones who developed the widely-used internal control framework, so D is definitely the right choice here.

upvoted 0 times

...