Exam 5: Packet Filtering

A stateful filter has a ____, which is a list of current connections.

____ are stand-alone hardware devices with self-contained components thar are purpose built to filter out network traffic that does not conform to established rules.

The ____ is a structure for organizing Internet names associated with IP addresses.

A(n) ____________________ is hardware or software that blocks or allows transmission of information packets based on criteria such as port, IP address, and protocol.

Match each item with a statement below. -Maintains a record of the state of a connection when filtering packets.

The proper rule ____________________ ensures that the most resource-intensive actions are performed after the most restrictive ones, thereby reducing the number of packets that undergo intense scrutiny.

Describe how a firewall can enable Web access.

When Web services are offered outside the firewall, ____________________ traffic is prevented from reaching the internal networks via the implementation of some form of proxy access or DMZ architecture.

Telnet is most often assigned to use port ____.

Explain the process of packet filtering by TCP or UDP port number.

A single bit of information in a TCP packet -the ____________________ flag -indicates if a packet is requesting a connection or a connection has already been established.

TCP/IP includes ____ which are small manageable chucks of network data.

It is good practice to block ____ access to all internal servers from the public networks.

Filtering by TCP or UDP port number is commonly called port filtering or ____________________ filtering.

Match each item with a statement below. -Reviews packet header content and makes decisions on whether to allow or drop the packets based on whether a connection has actually been established between an external host and an internal one.

What are some of the e-mail protocols that may be used within an organization?

The ____ flag tells a host to immediately terminate a connection.

Some systems, like Windows and Linux, have built-in utilities that can filter packets on the TCP/IP stack of the server software.

Packets requesting a connection have the ACK bit set to 0; those that are part of an ongoing connection have the ACK bit set to ____.

A stateless or stateful packet filter that supports active ____ must allow all traffic coming from TCP Port 20 as well as outbound traffic coming from ports above 1023.