Firewalls will drop ________.

• A. Suspicious packets
• B. Provable attack packets
• C. All traffic
• D. Legitimate traffic

Answer: (B)

Firewalls enforce access control by inspecting each packet and applying rules about what is allowed. When a packet is clearly identified as part of an attack—proven through known attack signatures or concrete evidence that it is malicious—the firewall will drop it to stop the threat. This behavior protects the network while still permitting legitimate traffic that matches permitted policies to pass.

Dropping all traffic would cut off communication entirely, and dropping legitimate traffic would disrupt normal operations, which is undesirable. Some firewalls can flag or inspect suspicious activity, but the decisive action against a confirmed attack is to drop the provably malicious packets.