Check Point Certified Security Administrator (CCSA) R81.20 — Question 124

Which of the following is true about Stateful Inspection?

Answer options

• A. Stateful Inspection looks at both the headers of packets, as well as examining their content.
• B. Stateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.
• C. Stateful Inspection requires that a server reply to a request, in order to track a connection’s state.
• D. Stateful Inspection tracks state using two tables, one for incoming traffic and one for outgoing traffic.

Correct answer: A

Explanation

Option A is correct because Stateful Inspection indeed examines both the headers and the content of packets to ensure the data is legitimate. Option B is incorrect as Stateful Inspection typically uses a single rule for both directions, while option C is not entirely true because it does not require a server response for tracking. Option D is also wrong since Stateful Inspection uses a single table to manage the state of connections, rather than two separate tables.