Question 1

Which type of translation should you use if you need 50 computers in the corporate network to be able to access the Internet using a single public IP address?

Accepted Answer

A)  one-to-one NAT 
B)  port address translation 
C)  one-to-many NAT 
D)  DMZ proxy translation 
A)  one-to-one NAT 
B)  port address translation 
C)  one-to-many NAT 
D)  DMZ proxy translation

Question 2

Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?

Accepted Answer

Originally,the term dual-homed host was

Question 3

You can ______________ a bastion host by removing unnecessary accounts and services.

Accepted Answer

The answer of You can ______________ a bastion host by...

Question 4

Which of the following is a disadvantage of using a proxy server?

Accepted Answer

A)  shields internal host IP addresses 
B)  slows Web page access 
C)  may require client configuration 
D)  can't filter based on packet content 
A)  shields internal host IP addresses 
B)  slows Web page access 
C)  may require client configuration 
D)  can't filter based on packet content

Question 5

MATCHING
-a device that filters outgoing connections

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 6

MATCHING
-the process of mapping one internal IP address to one external IP address

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 7

Which of the following best describes a DMZ?

Accepted Answer

A)  a network of computers configured with robust firewall software 
B)  a subnet of publicly accessible servers placed outside the internal network 
C)  a private subnet that is inaccessible to both the Internet and the company network 
D)  a proxy server farm used to protect the identity of internal servers 
A)  a network of computers configured with robust firewall software 
B)  a subnet of publicly accessible servers placed outside the internal network 
C)  a private subnet that is inaccessible to both the Internet and the company network 
D)  a proxy server farm used to protect the identity of internal servers

Question 8

A primary goal of proxy servers is to provide security at the _______________ layer.

Accepted Answer

The answer of A primary goal of proxy servers is...

Question 9

How does a screened host setup differ from a dual-homed host configuration? Why might you choose this configuration?

Accepted Answer

A screened host setup is similar to a du

Question 10

A _______________ router determines whether to allow or deny packets based on their source and destination IP addresses.

Accepted Answer

The answer of A _______________ router determines whether to allow...

Question 11

MATCHING
-a router placed between an untrusted network and an internal network

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 12

MATCHING
-software that forwards packets to and from the network being protected and caches Web pages to speed up network performance

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 13

MATCHING
-a host in which one interface is connected to an internal network and the other interface is connected to a router to an untrusted network

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 14

Proxy servers take action based only on IP header information.

Accepted Answer

A) True 
 B)False

Question 15

MATCHING
-software that prioritizes and schedules requests and then distributes them to servers in a server cluster based on each server's current load and processing power

Accepted Answer

A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall 
A) dual-homed host 
B) load-balancing software 
C) many-to-one NAT 
D) one-to-one NAT 
E) proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall

Question 16

Which of the following is best described as software that prioritizes and schedules requests and then distributes them to servers based on each server's current load and processing power.

Accepted Answer

A)  server pooling software 
B)  traffic distribution filter 
C)  priority server farm 
D)  load-balancing software 
A)  server pooling software 
B)  traffic distribution filter 
C)  priority server farm 
D)  load-balancing software

Question 17

How does a server farm and load-balancing software figure into the multiple DMZ/firewall configuration?

Accepted Answer

One DMZ does not provide enough security

Question 18

What is a honeypot and how is one used to help protect the network?

Accepted Answer

A honeypot is a computer placed on the n

Question 19

What are the 8 general steps for creating a bastion host?

Accepted Answer

1.Select a machine with adequate memory

Question 20

In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.

Accepted Answer

The answer of In a screened ____________ setup,a router is...

Which type of translation should you use if you need 50 computers in the corporate network to be able to access the Internet using a single public IP address?

Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?

You can ______________ a bastion host by removing unnecessary accounts and services.

Which of the following is a disadvantage of using a proxy server?

MATCHING -a device that filters outgoing connections

MATCHING -the process of mapping one internal IP address to one external IP address

Which of the following best describes a DMZ?

A primary goal of proxy servers is to provide security at the _______________ layer.

How does a screened host setup differ from a dual-homed host configuration? Why might you choose this configuration?

A _______________ router determines whether to allow or deny packets based on their source and destination IP addresses.

MATCHING -a router placed between an untrusted network and an internal network

MATCHING -software that forwards packets to and from the network being protected and caches Web pages to speed up network performance

MATCHING -a host in which one interface is connected to an internal network and the other interface is connected to a router to an untrusted network

Proxy servers take action based only on IP header information.

MATCHING -software that prioritizes and schedules requests and then distributes them to servers in a server cluster based on each server's current load and processing power

Which of the following is best described as software that prioritizes and schedules requests and then distributes them to servers based on each server's current load and processing power.

How does a server farm and load-balancing software figure into the multiple DMZ/firewall configuration?

What is a honeypot and how is one used to help protect the network?

What are the 8 general steps for creating a bastion host?

In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

VPN Concepts

Internet and World Wide Web Security

Security Policy Design and Implementation

On-Going Security Management

Filters

Exam 10: Firewall Design and Management

Which type of translation should you use if you need 50 computers in the corporate network to be able to access the Internet using a single public IP address?

Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?

You can ______________ a bastion host by removing unnecessary accounts and services.

Which of the following is a disadvantage of using a proxy server?

MATCHING -a device that filters outgoing connections

MATCHING -the process of mapping one internal IP address to one external IP address

Which of the following best describes a DMZ?

A primary goal of proxy servers is to provide security at the _______________ layer.

How does a screened host setup differ from a dual-homed host configuration? Why might you choose this configuration?

A _______________ router determines whether to allow or deny packets based on their source and destination IP addresses.

MATCHING -a router placed between an untrusted network and an internal network

MATCHING -software that forwards packets to and from the network being protected and caches Web pages to speed up network performance

MATCHING -a host in which one interface is connected to an internal network and the other interface is connected to a router to an untrusted network

Proxy servers take action based only on IP header information.

MATCHING -software that prioritizes and schedules requests and then distributes them to servers in a server cluster based on each server's current load and processing power

Which of the following is best described as software that prioritizes and schedules requests and then distributes them to servers based on each server's current load and processing power.

How does a server farm and load-balancing software figure into the multiple DMZ/firewall configuration?

What is a honeypot and how is one used to help protect the network?

What are the 8 general steps for creating a bastion host?

In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

VPN Concepts

Internet and World Wide Web Security

Security Policy Design and Implementation

On-Going Security Management

Filters