Which technology tracks the state of network connections to enforce rules?

Which technology tracks the state of network connections to enforce rules?

• A. Static Packet Filtering
• B. Network Address Translation
• C. Stateful Inspection
• D. Deep Packet Inspection

Answer: (C)

Tracking the state of network connections to enforce rules refers to a stateful inspection firewall. It keeps a table of active connections—recording who’s talking to whom, which protocol, and the current stage of the connection. With every packet, it checks whether the packet is part of an existing, established session or if it’s trying to start a new one. This state awareness lets the firewall apply rules based on context, such as allowing inbound packets only if they belong to an legitimate, established connection while blocking unsolicited traffic. Stateless approaches inspect each packet in isolation and can’t verify the relationship between packets, which makes them incapable of enforcing rules that depend on a connection’s state. Deep Packet Inspection looks at payload content, and Network Address Translation focuses on mapping addresses, but neither inherently tracks connection state to enforce rules.

Tracking the state of network connections to enforce rules refers to a stateful inspection firewall. It keeps a table of active connections—recording who’s talking to whom, which protocol, and the current stage of the connection. With every packet, it checks whether the packet is part of an existing, established session or if it’s trying to start a new one. This state awareness lets the firewall apply rules based on context, such as allowing inbound packets only if they belong to an legitimate, established connection while blocking unsolicited traffic. Stateless approaches inspect each packet in isolation and can’t verify the relationship between packets, which makes them incapable of enforcing rules that depend on a connection’s state. Deep Packet Inspection looks at payload content, and Network Address Translation focuses on mapping addresses, but neither inherently tracks connection state to enforce rules.