Question 1

Firewall ____ indicate whether a large number of echo messages are being received.

Accepted Answer

A)  logs 
B)  state tables 
C)  alerts 
D)  errors 
A)  logs 
B)  state tables 
C)  alerts 
D)  errors

Question 2

How should a firewall process fragmentation flags?

Accepted Answer

Fragmentation of IP packets isn't bad in

Question 3

The ____ describes the length of the packet header in 32-bit words and is a 4 bit value.

Accepted Answer

A)  Header checksum 
B)  type of service 
C)  total length 
D)  Internet header length 
A)  Header checksum 
B)  type of service 
C)  total length 
D)  Internet header length

Question 4

A stateless filter compares the header data against its ____ and forwards each packet as a rule is found to match the specifics of that packet.

Accepted Answer

A)  ACK flag 
B)  rule base 
C)  state table 
D)  log 
A)  ACK flag 
B)  rule base 
C)  state table 
D)  log

Question 5

One type of network protocol attack takes advantage of the ICMP Echo Request message type by flooding a target computer with ICMP echo requests.

Accepted Answer

A) True 
 B)False

Question 6

What are ICMP packets?

Accepted Answer

ICMP rules are especially important beca

Question 7

The problem with fragmentation is that because the TCP or UDP port number is provided only at the beginning of a packet, it appears ____.

Accepted Answer

A)  only in fragments numbered 0 
B)  only in fragments numbered above 0 
C)  in all fragments 
D)  in no fragments 
A)  only in fragments numbered 0 
B)  only in fragments numbered above 0 
C)  in all fragments 
D)  in no fragments

Question 8

ICMP message type ____ indicates that a faster route has been located.

Accepted Answer

A)  0 
B)  3 
C)  5 
D)  6 
A)  0 
B)  3 
C)  5 
D)  6

Question 9

____ packet filters are useful for completely blocking traffic from a subnet or other network.

Accepted Answer

A)  Stateless 
B)  Stateful 
C)  Personal 
D)  IP 
A)  Stateless 
B)  Stateful 
C)  Personal 
D)  IP

Question 10

Match each item with a statement below.
-Originally developed as a means of enabling large packets to pass through early routers that had frame size limitations.

Accepted Answer

A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering 
A) packet 
B) identification header field 
C) router 
D) ICMP 
E) protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering

Firewall ____ indicate whether a large number of echo messages are being received.

How should a firewall process fragmentation flags?

The ____ describes the length of the packet header in 32-bit words and is a 4 bit value.

A stateless filter compares the header data against its ____ and forwards each packet as a rule is found to match the specifics of that packet.

One type of network protocol attack takes advantage of the ICMP Echo Request message type by flooding a target computer with ICMP echo requests.

What are ICMP packets?

The problem with fragmentation is that because the TCP or UDP port number is provided only at the beginning of a packet, it appears ____.

ICMP message type ____ indicates that a faster route has been located.

____ packet filters are useful for completely blocking traffic from a subnet or other network.

Match each item with a statement below. -Originally developed as a means of enabling large packets to pass through early routers that had frame size limitations.

Introduction to Information Security

Security Policies and Standards

Authenticating Users

Introduction to Firewalls

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters

Exam 5: Packet Filtering

Firewall ____ indicate whether a large number of echo messages are being received.

How should a firewall process fragmentation flags?

The ____ describes the length of the packet header in 32-bit words and is a 4 bit value.

A stateless filter compares the header data against its ____ and forwards each packet as a rule is found to match the specifics of that packet.

One type of network protocol attack takes advantage of the ICMP Echo Request message type by flooding a target computer with ICMP echo requests.

What are ICMP packets?

The problem with fragmentation is that because the TCP or UDP port number is provided only at the beginning of a packet, it appears ____.

ICMP message type ____ indicates that a faster route has been located.

____ packet filters are useful for completely blocking traffic from a subnet or other network.

Match each item with a statement below. -Originally developed as a means of enabling large packets to pass through early routers that had frame size limitations.

Introduction to Information Security

Security Policies and Standards

Authenticating Users

Introduction to Firewalls

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters