Firewalls do not stop provable attack packets.

• A. True
• B. False
• C. Both
• D. Neither

Answer: (B)

Firewalls enforce access control by inspecting traffic and dropping packets that match rules or known threat signatures. When a packet aligns with a configured rule—such as an exploit signature, a forbidden port, or unusual connection patterns—the firewall can stop it before it reaches its destination. This is a core defense role: filtering out provable attack attempts based on policy and signatures, especially with stateful inspection and IPS features.

Of course, there are limitations: encrypted payloads can hide malicious content from inspection, new or obfuscated attacks may not be covered by existing signatures, and misconfigurations can allow harmful traffic through. Still, the idea that firewalls do not stop provable attack packets is not correct; they do block such packets when they match the protections in place.