Study. uk . com
  1. Home
  2. All questions
  3. Question 258

CISSP study material · question 258 of 500

Which pieces of information does a basic packet filter use to make its decision? Choose three.

  1. The application-layer command carried in the payload.
  2. Source and destination IP address.
  3. The interface the packet crossed and its direction.
  4. The network or transport protocol in use, and transport ports where the protocol has them.
Show the answer

Answer: C. The interface the packet crossed and its direction.
B. Source and destination IP address.
D. The network or transport protocol in use, and transport ports where the protocol has them.

A packet filter works from source and destination address, the protocol, transport session ports where present, and the interface traversed with its direction. Application content is beyond it.

Source: NIST SP 800-41 Rev. 1 (NIST) — SP 800-41 Rev. 1 > 2.1.1 Packet Filtering

Challenge yourself on this topic → Study as cards