Systems Security Certified Practitioner – SSCP – Question1025 - Systems Security Certified Practitioner

Which of the following statements pertaining to packet filtering is incorrect?

A. It is based on ACLs.
B. It is not application dependant.
C. It operates at the network layer.
D. It keeps track of the state of a connection.

Correct Answer: D

Explanation:

Packet filtering is used in the first generation of firewalls and does not keep track of the state of a connection. Stateful packet filtering does. Source: WALLHOFF, John, CISSP Summary 2002, April 2002, CBK#2 Telecommunications and Network Security (page 6)