Question

question 12

what is the advantage of stateful firewall rules over stateless rules?

a stateless rules offer better security.
b stateless rules are easier to configure.
c stateful rules can differentiate between new and established connections.
d stateful rules require less processing power.

Explanation:

Define firewall rule types

In Network Security, firewalls are categorized by how they inspect traffic. Stateless firewalls inspect packets individually based on static criteria (IPs, ports) without context. Stateful firewalls monitor the state of active connections.

Analyze the advantages of stateful rules

Stateful rules track the state of network connections (such as TCP handshakes). This allows them to distinguish between a new connection attempt and packets belonging to an already established, authorized session.

Evaluate the given options

• (A) is incorrect because stateful rules, not stateless, offer better security.
• (B) is incorrect because stateless rules are generally simpler and easier to configure.
• (C) is correct because tracking connection state allows the firewall to identify established traffic.
• (D) is incorrect because stateful inspection requires keeping a state table, which uses more processing power and memory than stateless filtering.

Answer:

• (A) Stateless rules offer better security.
• (B) Stateless rules are easier to configure.
• (C) Stateful rules can differentiate between new and established connections. (Correct answer)
• (D) Stateful rules require less processing power.