Huawei Exam H12-821_V1.0 Topic 1 Question 42 Discussion

Actual exam question for Huawei's H12-821_V1.0 exam

Question #: 42
Topic #: 1

Which of the following statements regarding the stateful inspection firewall is true?

AWhen the stateful inspection firewall checks packets, packets of one same connection are not correlated.

BBecause UDP is a connectionless protocol, so the stateful inspection firewall cannot match UDP packets with the status table.

CThe stateful inspection firewall only needs to match the first data packet against a rule, and the subsequent packets of the connection are matched directly in the state table.

DThe stateful inspection firewall needs to match the rules for each incoming packet.

Show Suggested Answer

Suggested Answer: A

by Erick at Jul 05, 2023, 09:48 PM

Limited Time Offer

25%

Off

Get Premium H12-821_V1.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nelida

11 days ago

Man, I'm glad I read through the options carefully. If I just saw 'stateful firewall' and picked the first answer, I would have been way off base. This stuff really requires understanding the core concepts.

upvoted 0 times

...

Hildegarde

12 days ago

Option D sounds like it would be super inefficient. Matching every single packet against the full rule set? No way, that's not how a stateful firewall works at all.

upvoted 0 times

Arthur

8 hours ago

B) Because UDP is a connectionless protocol, so the stateful inspection firewall cannot match UDP packets with the status table.

upvoted 0 times

...

Hyun

3 days ago

A) When the stateful inspection firewall checks packets, packets of one same connection are not correlated.

upvoted 0 times

...

Viola

15 days ago

Haha, option A is pretty funny. Of course the stateful firewall correlates packets of the same connection, that's the whole reason it's called 'stateful'!

upvoted 0 times

...

Shawnda

21 days ago

I was a bit confused by option B. Just because UDP is connectionless, it doesn't mean the stateful firewall can't track and match UDP packets based on the connection state. That's kind of the whole point of stateful inspection!

upvoted 0 times

...

Galen

23 days ago

But C makes sense because it would be more efficient to match subsequent packets directly in the state table.

upvoted 0 times

...

Gearldine

24 days ago

Option C seems to be the correct answer. The stateful inspection firewall keeps track of the connection state, so it only needs to match the first packet against the rules, and then can quickly match subsequent packets in the state table.

upvoted 0 times

...