Question 1

A stateful filter has a ____, which is a list of current connections.

Accepted Answer

A)   state table
B)   rule base
C)   rule list
D)   state packet list A

Question 2

____ are stand-alone hardware devices with self-contained components thar are purpose built to filter out network traffic that does not conform to established rules.

Accepted Answer

A)   Firewall appliances
B)   Routers
C)   Software firewalls
D)   Operating systems A

Question 3

The ____ is a structure for organizing Internet names associated with IP addresses.

Accepted Answer

A)   Domain Name System (DNS) 
B)   Transport Control Protocol (TCP) 
C)   Hypertext Transfer Protocol (HTTP) 
D)   Simple Mail Transfer Protocol (SMTP)  A

Question 4

A(n) ____________________ is hardware or software that blocks or allows transmission of information packets based on criteria such as port, IP address, and protocol.

Accepted Answer

The answer of A(n) ____________________ is hardware or software that...

Question 5

Match each item with a statement below.
-Maintains a record of the state of a connection when filtering packets.

Accepted Answer

A)  packet
B)  identification header field
C)  router
D)  ICMP
E)  protocol header fieldF) firewall appliancesG) stateful packet filteringH) fragmentationI) stateless packet filtering

Question 6

The proper rule ____________________ ensures that the most resource-intensive actions are performed after the most restrictive ones, thereby reducing the number of packets that undergo intense scrutiny.

Accepted Answer

The answer of The proper rule ____________________ ensures that the...

Question 7

Describe how a firewall can enable Web access.

Accepted Answer

The answer of Describe how a firewall can enable Web...

Question 8

When Web services are offered outside the firewall, ____________________ traffic is prevented from reaching the internal networks via the implementation of some form of proxy access or DMZ architecture.

Accepted Answer

The answer of When Web services are offered outside the...

Question 9

Telnet is most often assigned to use port ____.

Accepted Answer

A)   20
B)   21
C)   23
D)   80

Question 10

Explain the process of packet filtering by TCP or UDP port number.

Accepted Answer

The answer of Explain the process of packet filtering by...

Question 11

A single bit of information in a TCP packet -the ____________________ flag -indicates if a packet is requesting a connection or a connection has already been established.

Accepted Answer

The answer of A single bit of information in a...

Question 12

TCP/IP includes ____ which are small manageable chucks of network data.

Accepted Answer

A)   Folders
B)   Frames
C)   Messages
D)   Packets

Question 13

It is good practice to block ____ access to all internal servers from the public networks.

Accepted Answer

A)   HTTP
B)   Telnet
C)   Simple Mail Transport Protocol
D)   DNS

Question 14

Filtering by TCP or UDP port number is commonly called port filtering or ____________________ filtering.

Accepted Answer

The answer of Filtering by TCP or UDP port number...

Question 15

Match each item with a statement below.
-Reviews packet header content and makes decisions on whether to allow or drop the packets based on whether a connection has actually been established between an external host and an internal one.

Accepted Answer

A)  packet
B)  identification header field
C)  router
D)  ICMP
E)  protocol header fieldF) firewall appliancesG) stateful packet filteringH) fragmentationI) stateless packet filtering

Question 16

What are some of the e-mail protocols that may be used within an organization?

Accepted Answer

The answer of What are some of the e-mail protocols...

Question 17

The ____ flag tells a host to immediately terminate a connection.

Accepted Answer

A)   RST
B)   ACK
C)   FIN
D)   STP

Question 18

Some systems, like Windows and Linux, have built-in utilities that can filter packets on the TCP/IP stack of the server software.

Accepted Answer

A) True 
 B)False

Question 19

Packets requesting a connection have the ACK bit set to 0; those that are part of an ongoing connection have the ACK bit set to ____.

Accepted Answer

A)   -1
B)   0
C)   1
D)   99

Question 20

A stateless or stateful packet filter that supports active ____ must allow all traffic coming from TCP Port 20 as well as outbound traffic coming from ports above 1023.

Accepted Answer

A)   TCP
B)   ICMP
C)   FTP
D)   UDP

Exam 5: Packet Filtering