Exam 4: Firewall Technologies and Administration

Match each item with a statement below. a.Commercial-grade firewall f.Application-level gateway b.Dual-homed host firewall g.URL filtering c.Packet-filtering firewall h.Circuit-level gateway d.Stateless packet filtering i.Firewall appliances e.Stateful packet filtering -Examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

Briefly describe how firewalls affect the transmission of packets within Internet Protocol (IP).

Why is the order of firewall rules important?

Known as the ping service, use of ____ traffic is a common method for hacker reconnaissance and should be turned off to prevent snooping.

At the Network layer, ____ are used to encapsulate packets (or datagrams).

For a single home user who regularly surfs the Web, exchanges e-mail, and uses instant messaging, a firewall's primary job is to keep viruses from infecting files and prevent Trojan horses from entering the system through hidden openings called ____________________.

The ____ process can be performed at the firewall and make use of encryption to protect credentials transmitted from client to server (or client to firewall).

Compare the concept of defense-in-depth and the principle of least privilege.

A computer firewall is designed to prevent all attackers, viruses, and would-be intruders from entering a computer or computer network.

A(n) ____ is an ideal endpoint for VPN, which connects two companies' networks over the Internet.

It is sometimes easier to protect a network from the Internet than from an inside attack.

What protocol breaks a message into numbered segments so that it can be transmitted?

A(n) ____________________ is an extended network that shares part of an organization's network with a third party.

Match each item with a statement below. a.Commercial-grade firewall f.Application-level gateway b.Dual-homed host firewall g.URL filtering c.Packet-filtering firewall h.Circuit-level gateway d.Stateless packet filtering i.Firewall appliances e.Stateful packet filtering -Create tunnels connecting specific processes or systems on each side of the firewall and then allow only authorized traffic, such as a specific type of TCP connection for authorized users, in these tunnels.

Match each item with a statement below. a.Commercial-grade firewall f.Application-level gateway b.Dual-homed host firewall g.URL filtering c.Packet-filtering firewall h.Circuit-level gateway d.Stateless packet filtering i.Firewall appliances e.Stateful packet filtering -Firewall packet inspection that ignores the state of the connection between the internal computer and the external computer.

A(n) ____ tracks the state and context of each packet in the conversation by recording which station sent what packet and when.

A ____ is a network subaddress (assigned a number between 0 and 65,535) through which a particular type of data is allowed to pass.

Even simple residential firewalls can be used to create a logical screened subnetwork (often called a ____) that can provide Web services.

Define jump rules and explain how they work.

Define and compare well-known ports and ephemeral ports.