FCSS – Network Security Specialist 7.4 — Question 36

Which of the following regarding protocol states is true?

Answer options

• A. proto_state=10 indicates an established TCP session.
• B. proto_state=00 indicates that UDP traffic flows in both directions.
• C. proto_state=01 indicates one-way ICMP traffic.
• D. proto_state=01 indicates an established TCP session.

Correct answer: D

Explanation

The correct answer is D because proto_state=01 is defined as indicating an established TCP session. Options A and C are incorrect as they misrepresent the meanings of the respective proto_state values, and option B incorrectly describes the state for UDP traffic.