Which term refers to the component that stores session information for a stateful firewall to track active connections?

Which term refers to the component that stores session information for a stateful firewall to track active connections?

• A. Stateful inspection
• B. State table
• C. Layer 7 firewall
• D. Proxy server

Answer: (B)

The concept here is how a stateful firewall tracks ongoing conversations by keeping a state table that records session information for each active connection. For every active session, the firewall stores data such as the source and destination IP addresses and ports, the transport protocol, and the current state of the connection (for example, whether the handshake has completed). When a packet arrives, the firewall quickly checks the state table to determine if it belongs to an existing session, which allows it to decide whether to permit, deny, or apply specific handling. Entries in the table time out after a period of inactivity to free resources. This storage of per-connection context is what enables efficient and accurate tracking of active connections. The other terms describe methods or architectures (stateful inspection is the technique, Layer 7 firewall refers to application-layer filtering, and a proxy server is a separate intermediary component) rather than the storage container for session data.

The concept here is how a stateful firewall tracks ongoing conversations by keeping a state table that records session information for each active connection. For every active session, the firewall stores data such as the source and destination IP addresses and ports, the transport protocol, and the current state of the connection (for example, whether the handshake has completed). When a packet arrives, the firewall quickly checks the state table to determine if it belongs to an existing session, which allows it to decide whether to permit, deny, or apply specific handling. Entries in the table time out after a period of inactivity to free resources. This storage of per-connection context is what enables efficient and accurate tracking of active connections. The other terms describe methods or architectures (stateful inspection is the technique, Layer 7 firewall refers to application-layer filtering, and a proxy server is a separate intermediary component) rather than the storage container for session data.