Check Point Certified Security Administrator (CCSA) R81 — Question 130

The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?

Answer options

• A. Stateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.
• B. When it comes to performance, proxies were significantly faster than stateful inspection firewalls.
• C. Proxies offer far more security because of being able to give visibility of the payload (the data).
• D. When it comes to performance, stateful inspection was significantly faster than proxies.

Correct answer: D

Explanation

The correct answer is D because stateful inspection firewalls generally provide faster processing compared to proxies, which need to analyze the entire payload. Option A is incorrect as stateful inspection does have visibility beyond Layer 3, option B is false since stateful inspections are typically faster, and option C, while true about enhanced security, does not address performance directly.