Podcast
Questions and Answers
Which OSI layer does a stateful inspection firewall operate on?
Which OSI layer does a stateful inspection firewall operate on?
- Layer 3 (Network)
- Layer 2 (Data Link)
- Layer 5 (Session) (correct)
- Layer 4 (Transport)
What is the primary function of a firewall?
What is the primary function of a firewall?
- Virus detection
- Data encryption
- Traffic filtering (correct)
- Network monitoring
How does a packet filtering firewall operate?
How does a packet filtering firewall operate?
- By analyzing the source and destination MAC addresses
- By comparing packet signatures against a known malware database
- By inspecting the contents of data packets
- By examining the header information of IP packets (correct)
What is a network access control list (ACL)?
What is a network access control list (ACL)?
What layer of the OSI model does a packet filtering firewall primarily function at?
What layer of the OSI model does a packet filtering firewall primarily function at?
What is the purpose of controlling outbound traffic with a firewall?
What is the purpose of controlling outbound traffic with a firewall?
Which of the following is NOT a common filtering criterion used by packet filtering firewalls?
Which of the following is NOT a common filtering criterion used by packet filtering firewalls?
What does it mean for a packet filtering firewall to be "stateless"?
What does it mean for a packet filtering firewall to be "stateless"?
Which of these statements is true about ingress and egress traffic?
Which of these statements is true about ingress and egress traffic?
Flashcards
Stateless Firewall
Stateless Firewall
A firewall that filters packets without tracking connection states.
Stateful Inspection Firewall
Stateful Inspection Firewall
A firewall that tracks active connections and their state.
Packet Filtering
Packet Filtering
A method that inspects packets against predefined rules.
Session Layer (OSI Model)
Session Layer (OSI Model)
Signup and view all the flashcards
State Table
State Table
Signup and view all the flashcards
Firewall
Firewall
Signup and view all the flashcards
Traffic Filtering
Traffic Filtering
Signup and view all the flashcards
Packet Filtering Firewall
Packet Filtering Firewall
Signup and view all the flashcards
Access Control List (ACL)
Access Control List (ACL)
Signup and view all the flashcards
IP Filtering
IP Filtering
Signup and view all the flashcards
Port Filtering
Port Filtering
Signup and view all the flashcards
Ingress and Egress
Ingress and Egress
Signup and view all the flashcards
Study Notes
Firewall Functions
- Firewalls filter traffic, blocking traffic that doesn't match defined rules.
- Firewalls can protect entire networks or individual hosts.
- The type of firewall dictates the level of inspection.
Packet Filtering Firewalls
- Packet filtering is a fundamental firewall function.
- Rules are defined in network access control lists (ACLs).
- Rules specify data packet types and actions (deny/accept).
- Packet filtering operates at Layer 3 (OSI model) – inspecting IP packet headers.
- Rules can filter based on:
- Source/destination IP address
- Protocol type (TCP, UDP, ICMP, etc.)
- Source/destination port numbers (within TCP/UDP headers)
- ACLs control inbound and/or outbound traffic (ingress/egress).
- Outbound filtering blocks unauthorized applications and malware.
- Filtering ingress and egress traffic uses separate ACLs.
- Packet filtering is stateless, each packet is analyzed independently.
Stateful Inspection Firewalls
- Stateful inspection maintains session information.
- Sessions are tracked in a dynamically updated table.
- Stateful firewalls operate at Layer 5 (OSI model).
- Incoming packets are checked against existing sessions.
- Allowed traffic passes without further monitoring for efficiency.
- Addresses shortcomings of stateless firewalls.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
