Question 1

A(n) ____________________ dialer is an automatic phone-dialing program that dials every number in a configured range and checks to see if a person, answering machine, or modem picks up.

Accepted Answer

The answer of A(n) ____________________ dialer is an automatic phone-dialing...

Question 2

In __________ mode, the data within an IP packet is encrypted, but the header information is not.

Accepted Answer

A) tunnel 
B) transport 
C) public 
D) symmetric

Question 3

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

Accepted Answer

A) Packet-filtering 
B) Application gateway 
C) Circuit gateway 
D) MAC layer

Question 4

A packet-____________________ firewall installed on a TCP/IP-based network typically functions at the IP level and determines whether to drop a packet (deny) or forward it to the next network connection (allow) based on the rules programmed into the firewall.

Accepted Answer

The answer of A packet-____________________ firewall installed on a TCP/IP-based...

Question 5

A(n) __________ is a private data network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures.

Accepted Answer

A) SVPN 
B) VPN 
C) SESAME 
D) KERBES

Question 6

The dominant architecture used to secure network access today is the __________ firewall.

Accepted Answer

A) static 
B) bastion 
C) unlimited 
D) screened subnet

Question 7

As organizations implement cloud-based IT solutions, bring your own device (BYOD) options for employees, and other emerging network solutions, the network perimeter may be ____________________ for them.

Accepted Answer

The answer of As organizations implement cloud-based IT solutions, bring...

Question 8

Terminal emulation, especially the unprotected ____________________ protocol, should be blocked from any access to all internal servers from the public network.

Accepted Answer

The answer of Terminal emulation, especially the unprotected ____________________ protocol,...

Question 9

Configuring firewall policies is viewed as much as a(n) __________ as it is a(n) __________.

Accepted Answer

A) art, science 
B) philosophy, skill 
C) skill, science 
D) pain, necessity

Question 10

The application layer proxy firewall is also known as a(n) __________.

Accepted Answer

A) application firewall 
B) client firewall 
C) proxy firewall 
D) All of the above

Question 11

All Internet Control Message Protocol (ICMP) data should be denied.

Accepted Answer

The answer of All Internet Control Message Protocol (ICMP) data...

Question 12

Even if Kerberos servers are subjected to denial-of-service attacks, a client can still request additional services.

Accepted Answer

A) True 
 B)False

Question 13

The proxy server is often placed in an unsecured area of the network or is placed in the __________ zone.

Accepted Answer

A) fully trusted 
B) hot 
C) demilitarized 
D) cold

Question 14

A common DMZ arrangement is a subnet firewall that consists of two or more internal bastion hosts behind a packet-filtering router, with each host protecting the trusted network. _________________________

Accepted Answer

A) True 
 B)False

Question 15

In most common implementation models, the content filter has two components: __________.

Accepted Answer

A) encryption and decryption 
B) filtering and encoding 
C) rating and decryption 
D) rating and filtering

Question 16

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

Accepted Answer

A) dynamic 
B) static 
C) stateful 
D) stateless

Question 17

A ____________________ mode VPN establishes two perimeter tunnel servers to encrypt all traffic that will traverse an unsecured network. The entire client packet is encrypted and added as the data portion of a packet addressed from one tunneling server to another.

Accepted Answer

The answer of A ____________________ mode VPN establishes two perimeter...

Question 18

​Accountability is the matching of an authenticated entity to a list of information assets and corresponding access levels.

Accepted Answer

A) True 
 B)False

Question 19

The static packet filtering firewall can react to an emergent event and update or create rules to deal with that event. _________________________

Accepted Answer

A) True 
 B)False

Question 20

Which of the following versions of TACACS is still in use?

Accepted Answer

A) TACACS 
B) Extended TACACS 
C) TACACS+ 
D) All of the above

Exam 6: Security Technology: Access Controls, Firewalls, and Vpns

A(n) ____________________ dialer is an automatic phone-dialing program that dials every number in a configured range and checks to see if a person, answering machine, or modem picks up.

In __________ mode, the data within an IP packet is encrypted, but the header information is not.

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

A packet-____________________ firewall installed on a TCP/IP-based network typically functions at the IP level and determines whether to drop a packet (deny) or forward it to the next network connection (allow) based on the rules programmed into the firewall.

A(n) __________ is a private data network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures.

The dominant architecture used to secure network access today is the __________ firewall.

As organizations implement cloud-based IT solutions, bring your own device (BYOD) options for employees, and other emerging network solutions, the network perimeter may be ____________________ for them.

Terminal emulation, especially the unprotected ____________________ protocol, should be blocked from any access to all internal servers from the public network.

Configuring firewall policies is viewed as much as a(n) as it is a(n) .

The application layer proxy firewall is also known as a(n) __________.

All Internet Control Message Protocol (ICMP) data should be denied.

Even if Kerberos servers are subjected to denial-of-service attacks, a client can still request additional services.

The proxy server is often placed in an unsecured area of the network or is placed in the __________ zone.

A common DMZ arrangement is a subnet firewall that consists of two or more internal bastion hosts behind a packet-filtering router, with each host protecting the trusted network. _________________________

In most common implementation models, the content filter has two components: __________.

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

A ____________________ mode VPN establishes two perimeter tunnel servers to encrypt all traffic that will traverse an unsecured network. The entire client packet is encrypted and added as the data portion of a packet addressed from one tunneling server to another.

Accountability is the matching of an authenticated entity to a list of information assets and corresponding access levels.

The static packet filtering firewall can react to an emergent event and update or create rules to deal with that event. _________________________

Which of the following versions of TACACS is still in use?

Exam 6: Security Technology: Access Controls, Firewalls, and Vpns

A(n) ____________________ dialer is an automatic phone-dialing program that dials every number in a configured range and checks to see if a person, answering machine, or modem picks up.

In __________ mode, the data within an IP packet is encrypted, but the header information is not.

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

A packet-____________________ firewall installed on a TCP/IP-based network typically functions at the IP level and determines whether to drop a packet (deny) or forward it to the next network connection (allow) based on the rules programmed into the firewall.

A(n) __________ is a private data network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures.

The dominant architecture used to secure network access today is the __________ firewall.

As organizations implement cloud-based IT solutions, bring your own device (BYOD) options for employees, and other emerging network solutions, the network perimeter may be ____________________ for them.

Terminal emulation, especially the unprotected ____________________ protocol, should be blocked from any access to all internal servers from the public network.

Configuring firewall policies is viewed as much as a(n) __________ as it is a(n) __________.

The application layer proxy firewall is also known as a(n) __________.

All Internet Control Message Protocol (ICMP) data should be denied.

Even if Kerberos servers are subjected to denial-of-service attacks, a client can still request additional services.

The proxy server is often placed in an unsecured area of the network or is placed in the __________ zone.

A common DMZ arrangement is a subnet firewall that consists of two or more internal bastion hosts behind a packet-filtering router, with each host protecting the trusted network. _________________________

In most common implementation models, the content filter has two components: __________.

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

A ____________________ mode VPN establishes two perimeter tunnel servers to encrypt all traffic that will traverse an unsecured network. The entire client packet is encrypted and added as the data portion of a packet addressed from one tunneling server to another.

​Accountability is the matching of an authenticated entity to a list of information assets and corresponding access levels.

The static packet filtering firewall can react to an emergent event and update or create rules to deal with that event. _________________________

Which of the following versions of TACACS is still in use?

Configuring firewall policies is viewed as much as a(n) as it is a(n) .

Accountability is the matching of an authenticated entity to a list of information assets and corresponding access levels.