Check Point Certified Security Administrator (CCSA) R81 — Question 149

Which of the following is true about Stateful Inspection?

Answer options

• B. Stateful Inspection looks at both the headers of packets, as well as deeply examining their content.
• C. Stateful Inspection requires that a server reply to a request, in order to track a connection's state
• D. Stateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.

Correct answer: B

Explanation

The correct answer is B because Stateful Inspection indeed analyzes both packet headers and their content to maintain state information. Option C is incorrect as Stateful Inspection can track connection state without requiring a server response for every request. Option D is also wrong because Stateful Inspection typically uses a single rule set that can handle both outbound and inbound traffic efficiently.