What is a potential security weakness of traditional stateful firewall?

A.
cannot support non-TCP flows

B.
retains the state of user data packet and dynamically assigned ports in the state table

C.
cannot track the state of each connection setup to ensure that each connection follows a legitimate TCP three-way handshake

D.
cannot detect application-layer attacks