Firewalls stop provable attack packets.

• A. True
• B. False
• C. Both
• D. Neither

Answer: (A)

Firewalls enforce traffic policies by inspecting packets and dropping any that match known attack patterns or violate allowed rules. When a packet aligns with a signature for a known exploit or breaches a rule (such as a restricted port, IP, or protocol), the firewall blocks it, preventing the attack from reaching its target. This is particularly true for firewalls with signature-based detection and deeper inspection capabilities. Of course, there are limits: encrypted payloads, zero-day exploits without signatures, or misconfigurations can allow some attack traffic to slip by. Still, for provable attack packets that match the firewall’s rules or signatures, the firewall will stop them.