Systems Security Certified Practitioner (SSCP) — Question 42

Which of the following is NOT a characteristic or shortcoming of packet filtering gateways?

Answer options

• A. The source and destination addresses, protocols, and ports contained in the IP packet header are the only information that is available to the router in making a decision whether or not to permit traffic access to an internal network.
• B. They don't protect against IP or DNS address spoofing.
• C. They do not support strong user authentication.
• D. They are appropriate for medium-risk environment.

Correct answer: D

Explanation

Option D is correct because packet filtering gateways are generally not adequate for environments classified as medium-risk, as they lack advanced security features. Options A, B, and C are valid characteristics or shortcomings of packet filtering gateways, as they rely solely on header information, do not guard against spoofing, and do not offer robust user authentication.