Study. uk . com
  1. Home
  2. All questions
  3. Question 266

CISSP study material · question 266 of 500

A firewall is configured to reassemble fragments before passing them inward. Which two consequences does NIST SP 800-41 note? Choose two.

  1. It consumes additional firewall resources, particularly memory.
  2. A careless implementation gives an attacker an easy denial-of-service target.
  3. It removes the ability to filter on transport ports.
  4. It converts the device from stateless to stateful inspection.
Show the answer

Answer: A. It consumes additional firewall resources, particularly memory.
B. A careless implementation gives an attacker an easy denial-of-service target.

Reassembly requires additional resources, especially memory, and must be implemented carefully because otherwise someone can readily mount a denial-of-service attack against the firewall.

Source: NIST SP 800-41 Rev. 1 (NIST) — SP 800-41 Rev. 1 > 2.1.1 Packet Filtering

Challenge yourself on this topic → Study as cards