Packet Filtering Gateway Overview Answers 1. What is a significant advantage of stateful inspection over packet filtering? A. It is easier to configure than packet filtering. B. It requires fewer resources to operate. C. It inspects individual packets in isolation. D. It maintains a state of connections over time. Answer: It maintains a state of connections over time. (D) Stateful inspection maintains a state of connections, offering more security compared to the more basic packet filtering. 2. What can potentially happen if the rule set for a network is not meticulously maintained? A. Improvement in application performance. B. Increased likelihood of security vulnerabilities. C. Enhanced security against all threats. D. Automatic updates to security protocols. Answer: Increased likelihood of security vulnerabilities. (B) A poorly maintained rule set can lead to vulnerabilities, potentially compromising network security. 3. Which aspect of stateful inspection makes it more complex to configure compared to stateless packet filtering? A. Inspects all traffic regardless of connection state. B. Tracks the behavior and status of active connections. C. Does not require any initial configuration. D. Automatically adapts to changing network conditions. Answer: Tracks the behavior and status of active connections. (B) Stateful inspection's requirement to track active connections adds complexity to its configuration. 4. Why is careful consideration necessary to distinguish between legitimate and malicious traffic? A. To ensure all traffic is allowed by default. B. To avoid unnecessary blockages of legitimate applications. C. To reduce the need for regular security audits. D. To increase the speed of network connections. Answer: To avoid unnecessary blockages of legitimate applications. (B) Distinguishing between traffic types is essential to prevent blocking legitimate applications or services. 5. What is a primary purpose of stateful inspection in network security? A. To track and prevent attacks exploiting network vulnerabilities. B. To simplify user access management. C. To solely block all incoming connections. D. To eliminate the need for network segmentation. Answer: To track and prevent attacks exploiting network vulnerabilities. (A) Stateful inspection is designed to monitor connections and prevent attacks that target vulnerabilities in those connections.