# 210-260 — Question 425

**Type:** multiple_response
**Topics:** topic_1

## Question

Which two statements about stateless firewalls are true? (Choose two.)

## Correct Answer

_See scenario._

## Explanation

However, since iptables and Netfilter were introduced and connection tracking in particular, this option was gotten rid of. The reason for this is that connection tracking can not work properly without defragmenting packets, and hence defragmenting has been incorporated into conntrack and is carried out automatically. It can not be turned off, except by turning off connection tracking. Defragmentation is always carried out if connection tracking is turned on.
Reference:
http://www.iptables.info/en/connection-state.html

**Reference:** examtopics_answer_description

---
Source: https://hiexam.net/q/cisco/210-260/425  
Practice (tracked): https://hiexam.net/study/210-260/practice