Question 1

Network firewall entry and exit points are called ____.

Accepted Answer

A)  sockets 
B)  ports 
C)  gateways 
D)  proxies 
A)  sockets 
B)  ports 
C)  gateways 
D)  proxies B

Question 2

In general, a(n) ____________________ is anything, whether hardware or software (or a combination of hardware and software), that can filter the transmission of packets of digital information as they attempt to pass through a boundary of a network.

Accepted Answer

firewall

Question 3

Describe a virtual firewall.

Accepted Answer

A virtual firewall has the same features and functions of its physical brethren but is built on a virtual server or is implemented as a virtual security appliance. The virtual security appliance is similar to the firewall appliance in that the firewall is bundled with a hardened operating system and virtualized hardware. As its name implies, the virtual server option is similar to a firewall system, but the firewall software is installed on a virtual server.

Question 4

Match each item with a statement below.
a.Commercial-grade firewall
f.Application-level gateway
b.Dual-homed host firewall
g.URL filtering
c.Packet-filtering firewall
h.Circuit-level gateway
d.Stateless packet filtering
i.Firewall appliances
e.Stateful packet filtering
-When this architectural approach is used, the bastion host contains two NICs rather than one, as in the bastion host configuration.

Accepted Answer

The answer of Match each item with a statement below.
a.Commercial-grade...

Question 5

Technologically, firewalls are categorized into ____.

Accepted Answer

A)  cycles 
B)  versions 
C)  generations 
D)  states 
A)  cycles 
B)  versions 
C)  generations 
D)  states

Question 6

____________________ record attempted intrusions and other suspicious activity as well as mundane events such as legitimate file accesses, unsuccessful connection attempts, and the like.

Accepted Answer

The answer of ____________________ record attempted intrusions and other suspicious...

Question 7

What is the primary disadvantage of application-level gateways?

Accepted Answer

The primary disadvantage of application-

Question 8

Application ____ are control devices that can restrict internal users from unlimited access to the Internet.

Accepted Answer

A)  proxies 
B)  programs 
C)  gateways 
D)  appliances 
A)  proxies 
B)  programs 
C)  gateways 
D)  appliances

Question 9

Which function is considered to be an advanced firewall feature?

Accepted Answer

A)  Providing entry and exit points such as TCP port 80 for Web page content 
B)  Allowing information that meets specified security criteria (such as an approved IP address) to pass 
C)  Logging of unauthorized accesses both into and out of a network 
D)  Providing a VPN link to another network 
A)  Providing entry and exit points such as TCP port 80 for Web page content 
B)  Allowing information that meets specified security criteria (such as an approved IP address) to pass 
C)  Logging of unauthorized accesses both into and out of a network 
D)  Providing a VPN link to another network

Question 10

Firewalls can speed up network traffic.

Accepted Answer

A) True 
 B)False

Question 11

Deep packet inspection is implemented through the use of ____ rules.

Accepted Answer

A)  ACL 
B)  firewall 
C)  jump 
D)  state table 
A)  ACL 
B)  firewall 
C)  jump 
D)  state table

Question 12

IP ____ is the falsification of the source IP address in a packet's header so that it appears to have come from a trusted or legitimate sender.

Accepted Answer

A)  switching 
B)  routing 
C)  snooping 
D)  spoofing 
A)  switching 
B)  routing 
C)  snooping 
D)  spoofing

Question 13

Which statement represents a packet-filtering best practice?

Accepted Answer

A)  Any outbound packet must not have a source address that is in your internal network. 
B)  Keep all packets that use the IP header source routing feature. 
C)  Any inbound packet must have a source address that is in your internal network 
D)  If your Web server is located behind the firewall, you need to allow HTTP or HTTPS (S-HTTP) data through for the Internet at large to view it. 
A)  Any outbound packet must not have a source address that is in your internal network. 
B)  Keep all packets that use the IP header source routing feature. 
C)  Any inbound packet must have a source address that is in your internal network 
D)  If your Web server is located behind the firewall, you need to allow HTTP or HTTPS (S-HTTP) data through for the Internet at large to view it.

Question 14

Match each item with a statement below.
a.Commercial-grade firewall
f.Application-level gateway
b.Dual-homed host firewall
g.URL filtering
c.Packet-filtering firewall
h.Circuit-level gateway
d.Stateless packet filtering
i.Firewall appliances
e.Stateful packet filtering
-An examination of the data contained in a packet as well as the state of the connection between internal and external computers.

Accepted Answer

The answer of Match each item with a statement below.
a.Commercial-grade...

Question 15

Describe the two basic security functions firewalls perform.

Accepted Answer

Firewalls perform two basic security fun

Question 16

Match each item with a statement below.
a.Commercial-grade firewall
f.Application-level gateway
b.Dual-homed host firewall
g.URL filtering
c.Packet-filtering firewall
h.Circuit-level gateway
d.Stateless packet filtering
i.Firewall appliances
e.Stateful packet filtering
-Can be used to block a site's Domain Name System (DNS) name.

Accepted Answer

The answer of Match each item with a statement below.
a.Commercial-grade...

Question 17

Match each item with a statement below.
a.Commercial-grade firewall
f.Application-level gateway
b.Dual-homed host firewall
g.URL filtering
c.Packet-filtering firewall
h.Circuit-level gateway
d.Stateless packet filtering
i.Firewall appliances
e.Stateful packet filtering
-Runs special software that enables it to act as a proxy for a specific service request.

Accepted Answer

The answer of Match each item with a statement below.
a.Commercial-grade...

Question 18

Match each item with a statement below.
a.Commercial-grade firewall
f.Application-level gateway
b.Dual-homed host firewall
g.URL filtering
c.Packet-filtering firewall
h.Circuit-level gateway
d.Stateless packet filtering
i.Firewall appliances
e.Stateful packet filtering
-Consists of application software that is configured for the firewall application and runs on a general-purpose computer.

Accepted Answer

The answer of Match each item with a statement below.
a.Commercial-grade...

Question 19

What are the limitations of packet filtering?

Accepted Answer

Filtering does not hide the IP addresses

Question 20

Which company offers a free firewall that provides basic ingress and egress filtering?

Accepted Answer

A)  Check Point 
B)  IBM 
C)  ZoneAlarm 
D)  Barracuda 
A)  Check Point 
B)  IBM 
C)  ZoneAlarm 
D)  Barracuda

Network firewall entry and exit points are called ____.

In general, a(n) ____________________ is anything, whether hardware or software (or a combination of hardware and software), that can filter the transmission of packets of digital information as they attempt to pass through a boundary of a network.

Describe a virtual firewall.

Technologically, firewalls are categorized into ____.

____________________ record attempted intrusions and other suspicious activity as well as mundane events such as legitimate file accesses, unsuccessful connection attempts, and the like.

What is the primary disadvantage of application-level gateways?

Application ____ are control devices that can restrict internal users from unlimited access to the Internet.

Which function is considered to be an advanced firewall feature?

Firewalls can speed up network traffic.

Deep packet inspection is implemented through the use of ____ rules.

IP ____ is the falsification of the source IP address in a packet's header so that it appears to have come from a trusted or legitimate sender.

Which statement represents a packet-filtering best practice?

Describe the two basic security functions firewalls perform.

What are the limitations of packet filtering?

Which company offers a free firewall that provides basic ingress and egress filtering?

Introduction to Information Security

Introduction to Networking

Cryptography

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters

Exam 4: Firewall Technologies and Administration

Network firewall entry and exit points are called ____.

In general, a(n) ____________________ is anything, whether hardware or software (or a combination of hardware and software), that can filter the transmission of packets of digital information as they attempt to pass through a boundary of a network.

Describe a virtual firewall.

Technologically, firewalls are categorized into ____.

____________________ record attempted intrusions and other suspicious activity as well as mundane events such as legitimate file accesses, unsuccessful connection attempts, and the like.

What is the primary disadvantage of application-level gateways?

Application ____ are control devices that can restrict internal users from unlimited access to the Internet.

Which function is considered to be an advanced firewall feature?

Firewalls can speed up network traffic.

Deep packet inspection is implemented through the use of ____ rules.

IP ____ is the falsification of the source IP address in a packet's header so that it appears to have come from a trusted or legitimate sender.

Which statement represents a packet-filtering best practice?

Describe the two basic security functions firewalls perform.

What are the limitations of packet filtering?

Which company offers a free firewall that provides basic ingress and egress filtering?

Introduction to Information Security

Introduction to Networking

Cryptography

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters