Correct Answer for the Question – Which characteristic is a potential security weakness of a traditional stateful firewall? is given below
Which characteristic is a potential security weakness of a traditional stateful firewall?http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/product_implementa tion_design_guide09186a00800fd670.htmlCisco IOS Firewall consists of several major subsystems:Stateful Packet Inspection provides a granular firewall engine Authentication Proxy offers a per-host access control mechanism Application Inspection features add protocol conformance checking and network use policy control Enhancements to these features extend these capabilities to VRF instances to support multiple virtual routers per device, and to Cisco Integrated Route-Bridging features to allow greater deployment flexibility, reduce implementation timelines, and ease requirements to add security to existing networks.
It cannot support UDP flows.
It cannot detect application-layer attacks.
It cannot ensure each TCP connection follows a legitimate TCP three-way handshake.
It works only in promiscuous mode.
The status of TCP sessions is retained in the state table after the sessions terminate.
It has low performance due to the use of syn-cookies.
Correct Answer
The Correct Answer for this Question is
It cannot detect application-layer attacks.
The answers for the certifications of MNCs could be very tricky to understand. that’s why we have solved and pasted these exam answers here. The Question – Which characteristic is a potential security weakness of a traditional stateful firewall? has been answered correctly and answers for various other similar questions could be found in the search box of this site.
More about these Exams
These Exam Questions and the order of these questions keep changing. but the answers are obviously same. so if you don’t find a question after another we suggest you search it in the search box and we are sure you’ll find it. you can bookmark this site for Quick access in future.
We hope you found it helpful don’t forget to leave a comment if you feel a need to correct or ask we’re always here to help.
you can find more here at mnccertified
Feel free to contact via comment or email.
Happy Learning
Cheers, Team MNCcertified