ON a stateful inspection Firewall where there is no session table, when the status detection mechanism is enabled and the second packet (CYN+ACK) of 3-way hadshakes reaches the firewall. Which of the following statements is true?
A.
If the firewall security policy permits packets to pass, the session table is created.
B.
By default, when status detection is disabled and the permit policy is configured packets can pass.
C.
Packets must pass the firewall, and a session table is established.
D.
If the firewall security policy permits packets to pass, the packets can pass the firewall.
In a stateful inspection firewall, if the status detection mechanism is enabled, it tracks and validates the state of connections using the session table. If there is no session table and a SYN+ACK packet reaches the firewall, it checks the security policy. If the policy explicitly permits the packet, it will pass through the firewall, but no session table will be created without the initial SYN packet. The other options are either incorrect or misrepresent the behavior of stateful inspection ​.