Check Point Certified Security Administrator (CCSA) R81.20 — Question 155

A stateful inspection firewall works by registering connection data and compares traffic to this information. Where is the information stored?

Answer options

• A. It is stored in the OS sessions table.
• B. It is stored using state tables.
• C. It is stored in the system SMEM memory pool.
• D. It is stored in a CSV file on the security gateway hard drive located in "$FWDIR/conf/…".

Correct answer: B

Explanation

The correct answer is B because stateful inspection firewalls utilize state tables to track active connections and their states. The other options are incorrect as the OS sessions table and SMEM memory pool do not specifically hold the connection data used by stateful firewalls, and storing data in a CSV file is not relevant to how stateful firewalls operate.