Implementing Cisco Network Security (IINS, legacy) — Question 93

Which two statements about stateless firewalls are true? (Choose two.)

Answer options

• A. They are designed to work most efficiently with stateless protocols such as HTTP or HTTPS.
• B. They compare the 5-tuple of each incoming packet against configurable rules.
• C. Cisco IOS cannot implement them because the platform is stateful by nature.
• D. They cannot track connections.

Correct answer: A, S, A

Explanation

Option A is correct because stateless firewalls are indeed more effective with stateless protocols. Option B is also correct as it describes how these firewalls assess packets. Option C is incorrect because Cisco IOS can implement stateless firewalls, and option D is misleading, as it implies that firewalls cannot perform any connection inspection, which is inaccurate.