Firewall Filter Actions to Terminate Packet Processing

Which two firewall filter actions will terminate the processing and evaluation of a packet? (Choose two.)

Prev Question Next Question

Question

Which two firewall filter actions will terminate the processing and evaluation of a packet? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

BD

The correct answers are C. deny and D. discard.

Firewall filters are used to evaluate packets and determine whether they should be allowed to pass through the firewall or be blocked. Each packet is processed sequentially through a list of rules, and if a rule matches the packet's properties, the associated action is taken.

Here is a detailed explanation of the actions:

A. permit - This action allows the packet to pass through the firewall and continue processing the subsequent rules. It does not terminate the evaluation of the packet and does not prevent other rules from being evaluated.

B. accept - This action allows the packet to pass through the firewall and terminate processing for this rule set. However, if there are other rule sets that need to be evaluated, the packet will continue processing in those sets.

C. deny - This action blocks the packet from passing through the firewall and terminates processing for this rule set. Deny is a more secure action than permit or accept because it completely prevents packets from reaching their destination.

D. discard - This action drops the packet and terminates processing for this rule set. It is similar to deny, but does not send an error message back to the source address.

In summary, both deny and discard actions will terminate the processing and evaluation of a packet, and prevent it from reaching its destination.