Question 1

Match each item with a statement below.
-The most common packet filter.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 2

Match each item with a statement below.
-Consists of two parts: the header and the data.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 3

Match each item with a statement below.
-Standalone hardware and software devices that have self-contained components.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 4

An 8-bit value ____.

Accepted Answer

A)  can be between 0 and 128 
B)  is between 00000001 and 11111111 
C)  must have at least 3 0s 
D)  is smaller than a 2-bit value 
A)  can be between 0 and 128 
B)  is between 00000001 and 11111111 
C)  must have at least 3 0s 
D)  is smaller than a 2-bit value

Question 5

Enabling external hosts to connect to your public servers in the DMZ, but not to hosts in the internal LAN, is an example of filtering on the ____.

Accepted Answer

A)  port number 
B)  protocol 
C)  source IP address 
D)  destination IP address 
A)  port number 
B)  protocol 
C)  source IP address 
D)  destination IP address

Question 6

The header field that indicates whether the packet is a fragment is ____.

Accepted Answer

A)  flags 
B)  options 
C)  protocol 
D)  destination IP address 
A)  flags 
B)  options 
C)  protocol 
D)  destination IP address

Question 7

How does a packet filter process IP header criteria?

Accepted Answer

A stateless filter looks at each packet'

Question 8

Stateless packet filtering is more secure than stateful packet filtering.

Accepted Answer

A) True 
 B)False

Question 9

Packet-filter rules must account for all possible ports that a type of communication might use or for all variations within a particular protocol.

Accepted Answer

A) True 
 B)False

Question 10

Describe best practices for testing firewall rules.

Accepted Answer

Test all firewall rules before they are

Question 11

How can a stateful packet filter determine whether a session is beginning or ending?

Accepted Answer

Two of the flags that are part of a pack

Question 12

The header field that can contain a security field, which enables the sender to assign a classification level to the packet is ____.

Accepted Answer

A)  flags 
B)  options 
C)  protocol 
D)  destination IP address 
A)  flags 
B)  options 
C)  protocol 
D)  destination IP address

Question 13

Match each item with a statement below.
-Identifies the IP protocol that was used in the data portion of the packet and should receive the data at its destination

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 14

Why might a small-scale software-only personal firewall cause problems in a network situation?

Accepted Answer

Although small-scale, software-only pers

Question 15

List and describe the types of hardware devices and software programs that perform packet filtering.

Accepted Answer

Routers: These are probably the most com

Question 16

Match each item with a statement below.
-Packets that can be easily forged and used to redirect other communications.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 17

Packet filters examine packet headers and packet data when applying allow and deny rules.

Accepted Answer

A) True 
 B)False

Question 18

Match each item with a statement below.
-16-bit value aids in the division of the data stream into packets of information.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Question 19

Using TCP or UDP port numbers can help you filter a wide variety of information, including SMTP and POP e-mail messages, NetBIOS sessions, ____, and Network News Transfer Protocol (NNTP) newsgroup sessions.

Accepted Answer

A)  DNS requests 
B)  ICMP messages 
C)  stateful transfers 
D)  Trojan horses 
A)  DNS requests 
B)  ICMP messages 
C)  stateful transfers 
D)  Trojan horses

Question 20

One of the first IP header criteria you can filter on is the packet's ____.

Accepted Answer

A)  length 
B)  ACK flag 
C)  source IP address 
D)  type of service 
A)  length 
B)  ACK flag 
C)  source IP address 
D)  type of service

Match each item with a statement below. -The most common packet filter.

Match each item with a statement below. -Consists of two parts: the header and the data.

Match each item with a statement below. -Standalone hardware and software devices that have self-contained components.

An 8-bit value ____.

Enabling external hosts to connect to your public servers in the DMZ, but not to hosts in the internal LAN, is an example of filtering on the ____.

The header field that indicates whether the packet is a fragment is ____.

How does a packet filter process IP header criteria?

Stateless packet filtering is more secure than stateful packet filtering.

Packet-filter rules must account for all possible ports that a type of communication might use or for all variations within a particular protocol.

Describe best practices for testing firewall rules.

How can a stateful packet filter determine whether a session is beginning or ending?

The header field that can contain a security field, which enables the sender to assign a classification level to the packet is ____.

Match each item with a statement below. -Identifies the IP protocol that was used in the data portion of the packet and should receive the data at its destination

Why might a small-scale software-only personal firewall cause problems in a network situation?

List and describe the types of hardware devices and software programs that perform packet filtering.

Match each item with a statement below. -Packets that can be easily forged and used to redirect other communications.

Packet filters examine packet headers and packet data when applying allow and deny rules.

Match each item with a statement below. -16-bit value aids in the division of the data stream into packets of information.

Using TCP or UDP port numbers can help you filter a wide variety of information, including SMTP and POP e-mail messages, NetBIOS sessions, ____, and Network News Transfer Protocol (NNTP) newsgroup sessions.

One of the first IP header criteria you can filter on is the packet's ____.

Introduction to Information Security

Security Policies and Standards

Authenticating Users

Introduction to Firewalls

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters

Exam 5: Packet Filtering

Match each item with a statement below. -The most common packet filter.

Match each item with a statement below. -Consists of two parts: the header and the data.

Match each item with a statement below. -Standalone hardware and software devices that have self-contained components.

An 8-bit value ____.

Enabling external hosts to connect to your public servers in the DMZ, but not to hosts in the internal LAN, is an example of filtering on the ____.

The header field that indicates whether the packet is a fragment is ____.

How does a packet filter process IP header criteria?

Stateless packet filtering is more secure than stateful packet filtering.

Packet-filter rules must account for all possible ports that a type of communication might use or for all variations within a particular protocol.

Describe best practices for testing firewall rules.

How can a stateful packet filter determine whether a session is beginning or ending?

The header field that can contain a security field, which enables the sender to assign a classification level to the packet is ____.

Match each item with a statement below. -Identifies the IP protocol that was used in the data portion of the packet and should receive the data at its destination

Why might a small-scale software-only personal firewall cause problems in a network situation?

List and describe the types of hardware devices and software programs that perform packet filtering.

Match each item with a statement below. -Packets that can be easily forged and used to redirect other communications.

Packet filters examine packet headers and packet data when applying allow and deny rules.

Match each item with a statement below. -16-bit value aids in the division of the data stream into packets of information.

Using TCP or UDP port numbers can help you filter a wide variety of information, including SMTP and POP e-mail messages, NetBIOS sessions, ____, and Network News Transfer Protocol (NNTP) newsgroup sessions.

One of the first IP header criteria you can filter on is the packet's ____.

Introduction to Information Security

Security Policies and Standards

Authenticating Users

Introduction to Firewalls

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters