Exam 156-315.80 All QuestionsBrowse all questions from this exam
Question 205

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

    Correct Answer: A

    The INSPECT Engine technology in Check Point FireWall-1 is designed to provide full application-layer awareness by extracting state-related information from all application layers and maintaining this information in dynamic state tables. This allows for evaluating subsequent connection attempts in a highly secure manner while offering maximum performance, scalability, and extensibility. Therefore, it is the technology that extracts detailed information from packets and stores that information in state tables.

Discussion
JUSTINzt2Option: B

answer is B, according to CCSA R80 student manual pg 25

SirSheikOption: A

The correct answer should be option A. "INSPECT Engine" Check Point FireWall-1’s Stateful Inspection overcomes the limitations of the previous two approaches by providing full application-layer awareness without breaking the client/server model. With Stateful Inspection, the packet is intercepted at the network layer, but then the INSPECT Engine takes over. It extracts state-related information required for the security decision from all application layers and maintains this information in dynamic state tables for evaluating subsequent connection attempts. This provides a solution which is highly secure and offers maximum performance, scalability, and extensibility.