If a firewall receives a suspicious packet, the firewall will ________.

• A. Log the packet
• B. Drop the packet
• C. Both log and drop
• D. Neither log nor drop

Answer: (D)

Firewalls act based on policy and configuration. Logging or dropping a packet isn’t automatic for every “suspicious” packet unless there’s a rule or setting that says to do so. If there’s no rule to log or block, the firewall will take no action and the packet can be allowed through by default. In other words, without an explicit log or drop rule, the default behavior is to neither log nor drop. To actually log or drop such traffic, you’d need a rule that specifies logging for that event or a deny/drop rule for that type of packet.