What is the difference between deep packet inspection and stateful inspection?

What is the difference between deep packet inspection and stateful inspection?
A . Deep packet inspection is more secure than stateful inspection on Layer 4
B . Stateful inspection verifies contents at Layer 4 and deep packet inspection verifies connection at Layer 7
C . Stateful inspection is more secure than deep packet inspection on Layer 7
D . Deep packet inspection allows visibility on Layer 7 and stateful inspection allows visibility on Layer 4

View Answer

Answer: D

Explanation:

Deep packet inspection (DPI) and stateful inspection are two techniques that are used by firewalls and other network security devices to inspect and filter network traffic. Stateful inspection allows visibility on Layer 4 (transport layer) of the OSI model, which means it can track the state of TCP or UDP connections and filter packets based on source and destination IP addresses, ports, and protocols. Deep packet inspection allows visibility on Layer 7 (application layer) of the OSI model, which means it can inspect the contents and payloads of packets and filter packets based on application-specific criteria, such as signatures, keywords, URLs, or behaviors.

Reference: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) v1.0, Module 2: Security Monitoring, Lesson 2.2: Network Security Monitoring Tools

Cisco Certified CyberOps Associate Overview, Exam Topics, 2.2 Describe the impact of network security monitoring tools on data privacy