Exam 6: Security Technology: Access Controls, Firewalls, and VPNS

The ____________________ authentication system is named after the three-headed dog of Greek mythology that guards the gates to the underworld.

__________ inspection firewalls keep track of each network connection between internal and external systems.

The application firewall is also known as a(n) ____________________ server.

The presence of external requests for Telnet services can indicate a potential attack. _________________________

A content filter, also known as a reverse firewall, is a network device that allows administrators to restrict access to external content from within a network.

A VPN, used properly, allows use of the Internet as if it were a private network.

The popular use for tunnel mode VPNs is the end-to-end transport of encrypted data. _________________________

Access control is achieved by means of a combination of policies, programs, and technologies. _________________________

A(n) ____________________ is a combination of hardware and software that filters or prevents specific information from moving between the outside world and the inside world.

The ability of a router to restrict traffic to a specific service is an advanced capability and not considered a standard feature for most routers.

In most common implementation models, the content filter has two components: __________.

The DMZ can be a dedicated port on the firewall device linking a single bastion host.

Terminal emulation, especially the unprotected ____________________ protocol, should be blocked from any access to all internal servers from the public network.

Even if Kerberos servers are subjected to denial-of-service attacks, a client can still request additional services.

The application layer proxy firewall is capable of functioning both as a firewall and an application layer proxy server.

Firewalls can be categorized by processing mode, development era, or structure.

Packet-filtering firewalls scan network data packets looking for compliance with the rules of the firewall's database or violations of those rules.

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

__________ firewalls are designed to operate at the media access control sublayer of the data link layer of the OSI network model.