Question 1

Which is a term used to refer to the process of authentication and verification?

Accepted Answer

A)  Connecting
B)  Filtering
C)  Negotiation
D)  ScreeningE) C) and D)
F) A) and C)

Question 2

Which firewall configuration would be appropriate within a network to separate and protect various subnets of a network to provide greater security?

Accepted Answer

A)  bastion host
B)  demilitarized zone
C)  dual-homed host
D)  router-basedE) A) and B)
F) All of the above

Question 3

Identifying abnormal activity on a firewall requires that one establish a:

Accepted Answer

A)  baseline
B)  bastion host
C)  proxy server
D)  screened hostE) A) and B)
F) A) and C)

Question 4

In comparing a packet filter firewall with a stateful packet inspection firewall (SPI) ,the SPI firewall is:

Accepted Answer

A)  LESS susceptible to ping and SYN floods and LESS susceptible to IP spoofing.
B)  LESS susceptible to ping and SYN floods but MORE susceptible to IP spoofing
C)  MORE susceptible to ping and SYN floods and LESS susceptible to IP spoofing
D)  MORE susceptible to ping and SYN floods and MORE susceptible to IP spoofingE) A) and D)
F) A) and C)

Question 5

An open source software circuit level gateway is available from which of the following?

Accepted Answer

A)  Amrita Labs
B)  SonicWALL
C)  Teros
D)  Watchguard TechnologiesE) B) and C)
F) None of the above

Question 6

A ____________ firewall solution is actually a combination of several different firewall systems in a single system.

Accepted Answer

hybrid

Question 7

A firewall that uses a combination of approaches rather than a single approach to protect the network is called:

Accepted Answer

A)  dual-homed
B)  hybrid
C)  multi-homed
D)  open sourceE) A) and B)
F) C) and D) B

Question 8

Taking security precautions such as keeping patches updated,uninstalling unneeded applications,closing unused ports,and turning off unused services is called ____________ the operating system.

Accepted Answer

The answer of Taking security precautions such as keeping patches...

Question 9

A firewall configuration using a server as a router and running multiple network interfaces with automatic routing disabled is an example of a:

Accepted Answer

A)  dual-homed host
B)  network host-based
C)  router-based
D)  screened hostE) B) and D)
F) B) and C)

Question 10

How can vulnerability to flooding attacks be reduced with an application gateway?

Accepted Answer

A)  Authenticating users
B)  External systems never see the gateway
C)  Packets are continually checked during the connection
D)  Vulnerability to flooding attacks with an application gateway cannot be mitigatedE) C) and D)
F) B) and D)

Question 11

Once a circuit level gateway verifies the user's logon,it creates a virtual circuit between:

Accepted Answer

A)  the external server and the proxy server
B)  the internal client and the proxy server
C)  the internal client and the external server
D)  the external server and the firewallE) None of the above
F) A) and B) B

Question 12

Which type of firewall is included in Windows XP and many distributions of Linux operating systems?

Accepted Answer

A)  Application proxy
B)  Packet filter
C)  Stateful packet inspection
D)  User authenticationE) A) and D)
F) B) and C)

Question 13

The first rule of firewalls dictates that to provide the best security,they not only must be installed properly,but they must also be ____________ properly.

Accepted Answer

The answer of The first rule of firewalls dictates that...

Question 14

With a circuit level gateway in place,external users only see the IP address of the ____________.

Accepted Answer

The answer of With a circuit level gateway in place,external...

Question 15

At what OSI layer do packet filters function?

Accepted Answer

A)  Physical layer
B)  Data link layer
C)  Network layer
D)  Transport layerE) B) and C)
F) A) and B)

Question 16

A term used to refer to the process of authentication and verification as accomplished on some gateways is ____________.

Accepted Answer

The answer of A term used to refer to the...

Question 17

Which serves as a single contact point between the Internet and the private network?

Accepted Answer

A)  Bastion host
B)  DMZ
C)  Dual-homed host
D)  Screened hostE) C) and D)
F) B) and D)

Question 18

Which firewall denies or permits access based in part on data determined from previous packets in the conversation?

Accepted Answer

A)  Application gateway
B)  Circuit level gateway
C)  Packet filter
D)  Stateful packet inspectionE) C) and D)
F) A) and B)

Question 19

In many typical configurations with multiple firewalls,e-mail servers and FTP servers are located in the:

Accepted Answer

A)  corporate Intranet
B)  demilitarized zone
C)  external network
D)  internal corporate networkE) B) and D)
F) A) and D)

Question 20

Which type of firewall negotiates between the server and client to permit or deny connection based on the type of software and connection requested?

Accepted Answer

A)  Application gateway
B)  Circuit level gateway
C)  Packet filter
D)  Stateful packet inspectionE) B) and D)
F) B) and C)

Exam 3: Fundamentals of Firewalls

Which is a term used to refer to the process of authentication and verification?

Correct AnswerverifiedShow Answer

Which firewall configuration would be appropriate within a network to separate and protect various subnets of a network to provide greater security?

Correct AnswerverifiedShow Answer

Identifying abnormal activity on a firewall requires that one establish a:

Correct AnswerverifiedShow Answer

In comparing a packet filter firewall with a stateful packet inspection firewall (SPI) ,the SPI firewall is:

Correct AnswerverifiedShow Answer

An open source software circuit level gateway is available from which of the following?

Correct AnswerverifiedShow Answer

A ____________ firewall solution is actually a combination of several different firewall systems in a single system.

Correct Answerverifiedhybrid

A firewall that uses a combination of approaches rather than a single approach to protect the network is called:

Correct AnswerverifiedB

Taking security precautions such as keeping patches updated,uninstalling unneeded applications,closing unused ports,and turning off unused services is called ____________ the operating system.

Correct AnswerverifiedShow Answer

A firewall configuration using a server as a router and running multiple network interfaces with automatic routing disabled is an example of a:

Correct AnswerverifiedShow Answer

How can vulnerability to flooding attacks be reduced with an application gateway?

Correct AnswerverifiedShow Answer

Once a circuit level gateway verifies the user's logon,it creates a virtual circuit between:

Correct AnswerverifiedB

Which type of firewall is included in Windows XP and many distributions of Linux operating systems?

Correct AnswerverifiedShow Answer

The first rule of firewalls dictates that to provide the best security,they not only must be installed properly,but they must also be ____________ properly.

Correct AnswerverifiedShow Answer

With a circuit level gateway in place,external users only see the IP address of the ____________.

Correct AnswerverifiedShow Answer

At what OSI layer do packet filters function?

Correct AnswerverifiedShow Answer

A term used to refer to the process of authentication and verification as accomplished on some gateways is ____________.

Correct AnswerverifiedShow Answer

Which serves as a single contact point between the Internet and the private network?

Correct AnswerverifiedShow Answer

Which firewall denies or permits access based in part on data determined from previous packets in the conversation?

Correct AnswerverifiedShow Answer

In many typical configurations with multiple firewalls,e-mail servers and FTP servers are located in the:

Correct AnswerverifiedShow Answer

Which type of firewall negotiates between the server and client to permit or deny connection based on the type of software and connection requested?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
hybrid

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified