Stateful packet inspection firewalls use relay operation with two connections per client/server pair.

• A. True
• B. False
• C. Both
• D. Neither

Answer: (B)

Stateful packet inspection relies on tracking the lifecycle of each connection and enforcing rules based on that connection state (new, established, related, or closing). It does not act as a relay between client and server by creating two separate connections for each pair. The traffic passes through the firewall and is allowed or blocked according to the stateful rules, rather than being split into a client-to-firewall and firewall-to-server relay. A proxy-based firewall, in contrast, typically uses two separate connections and does relay traffic between endpoints. Therefore, this statement is false.