Which of the following is a correct description of the stateful inspection firewall forwarding principle? (Multiple Choice)

Which of the following is a correct description of the stateful inspection firewall forwarding principle? (Multiple Choice)
A . The non-first packet forwarding is based on the session table, which can only be forwarded if it matches the session table.
B. ICMP packets do not perform stateful inspection.
C. Establish a connection for the UDP data stream when processing UDP protocol packets.
D. The firewall does not support the stateful inspection mechanism when deployed as a Layer 2 device.
E. Session state detection is performed based on the three-way handshake of the TCP connection.

Answer: ACE