Check Point Certified Security Administrator (CCSA) R81.20 — Question 154
When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?
Answer options
- A. Stateful Inspection offers unlimited connections because of virtual memory usage
- B. Stateful Inspection does not use memory to record the protocol used by the connection
- C. Only one rule is required for each connection.
- D. Stateful Inspection offers no benefits over Packet Filtering.
Correct answer: C
Explanation
The correct answer is C because Stateful Inspection maintains the state of active connections, allowing a single rule to manage the entire connection instead of requiring multiple rules for each packet. Options A and B are incorrect as they misrepresent how Stateful Inspection operates regarding memory and connection handling. Option D is false because Stateful Inspection does offer significant benefits over Packet Filtering, particularly in connection management.