Question 1

MATCHING
-the collection of rules that filter traffic at an interface of a firewall

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 2

Which of the following is NOT an ICMPv6 packet type that you should allow within your organization but never outside the organization?

Accepted Answer

A)   Destination unreachable
B)   Packet too big
C)   Time Exceeded
D)   Packet Redirect

Question 3

MATCHING
-hardware devices with firewall functionality

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 4

Describe a hardware firewall and include one or more advantages and disadvantages.

Accepted Answer

One advantage of hardware firewalls is t...

Question 5

What type of attack are stateless packet filters particularly vulnerable to?

Accepted Answer

A)   attempts to connect to ports above 1023
B)   attempts to connect to the firewall
C)   IP spoofing attacks
D)   attempts to connect to ports below 1023

Question 6

What are the most common features of IP protocol headers that stateless packet filters base their filtering decisions on?

Accepted Answer

IP address-Each packet-filtering rule sp...

Question 7

What is a suggested maximum size of a rule base?

Accepted Answer

A)   30 rules
B)   300 rules
C)   10 rules
D)   100 rules

Question 8

What is stateful packet filtering?

Accepted Answer

Stateful packet filters keep a record of...

Question 9

Describe a software firewall and include one or more advantages and disadvantages.

Accepted Answer

A software firewall can be combined with...

Question 10

Which of the following is described as the combination of an IP address and a port number?

Accepted Answer

A)   portal
B)   subnet
C)   datagram
D)   socket

Question 11

The rule base should permit access to public servers in the _________ and enable users to access the Internet.

Accepted Answer

DMZ
demili...

Question 12

MATCHING
-simple filters that determine whether to allow or block packets based on information in protocol headers

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 13

Stateless packet filtering keeps a record of connections that a host computer has made with other computers.

Accepted Answer

A) True 
 B)False

Question 14

MATCHING
-filters that are similar to stateless packet filters,except that they also determine whether to allow or block packets based on information about current connections

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 15

Which element of a rule base conceals internal names and IP addresses from users outside the network?

Accepted Answer

A)   tracking
B)   filtering
C)   NAT
D)   QoS

Question 16

Which of the following is NOT a criteria typically used by stateless packet filters to determine whether or not to block packets.

Accepted Answer

A)   IP address
B)   ports
C)   data patterns
D)   TCP flags

Question 17

What are the two standard ports used by FTP along with their function?

Accepted Answer

A)   UDP 23 control, TCP 20 data
B)   UDP 20 data, TCP 21 control
C)   TCP 21 control, TCP 20 data
D)   TCP 23 data, TCP 21 control

Question 18

At what layer of the OSI model do proxy servers generally operate?

Accepted Answer

A)   Application
B)   Session
C)   Transport
D)   Network

Question 19

MATCHING
-a file maintained by stateful packet filters that contains a record of all current connections

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 20

Describe a packet-filtering scenario that works with the DMZ.

Accepted Answer

One type of configuration combines packe...

Exam 9: Firewalls

Describe a packet-filtering scenario that works with the DMZ.

Correct AnswerverifiedOne type of configuration combines packe...View AnswerShow Answer

What type of attack are stateless packet filters particularly vulnerable to?

Correct AnswerverifiedShow Answer

Describe a hardware firewall and include one or more advantages and disadvantages.

Correct AnswerverifiedOne advantage of hardware firewalls is t...View AnswerShow Answer

What are the most common features of IP protocol headers that stateless packet filters base their filtering decisions on?

Correct AnswerverifiedIP address-Each packet-filtering rule sp...View AnswerShow Answer

MATCHING -a file maintained by stateful packet filters that contains a record of all current connections

Correct AnswerverifiedShow Answer

What is a suggested maximum size of a rule base?

Correct AnswerverifiedShow Answer

Which of the following is NOT a criteria typically used by stateless packet filters to determine whether or not to block packets.

Correct AnswerverifiedShow Answer

Which of the following is described as the combination of an IP address and a port number?

Correct AnswerverifiedShow Answer

Which element of a rule base conceals internal names and IP addresses from users outside the network?

Correct AnswerverifiedShow Answer

Stateless packet filtering keeps a record of connections that a host computer has made with other computers.

Correct AnswerverifiedShow Answer

What are the two standard ports used by FTP along with their function?

Correct AnswerverifiedShow Answer

Describe a software firewall and include one or more advantages and disadvantages.

Correct AnswerverifiedA software firewall can be combined with...View AnswerShow Answer

MATCHING -filters that are similar to stateless packet filters,except that they also determine whether to allow or block packets based on information about current connections

Correct AnswerverifiedShow Answer

MATCHING -hardware devices with firewall functionality

Correct AnswerverifiedShow Answer

Which of the following is NOT an ICMPv6 packet type that you should allow within your organization but never outside the organization?

Correct AnswerverifiedShow Answer

The rule base should permit access to public servers in the _________ and enable users to access the Internet.

Correct AnswerverifiedDMZdemili...View AnswerShow Answer

What is stateful packet filtering?

Correct AnswerverifiedStateful packet filters keep a record of...View AnswerShow Answer

MATCHING -the collection of rules that filter traffic at an interface of a firewall

Correct AnswerverifiedShow Answer

MATCHING -simple filters that determine whether to allow or block packets based on information in protocol headers

Correct AnswerverifiedShow Answer

At what layer of the OSI model do proxy servers generally operate?

Correct AnswerverifiedShow Answer

Correct Answer
verified
One type of configuration combines packe...
View Answer

Correct Answer
verified

Correct Answer
verified
One advantage of hardware firewalls is t...
View Answer

Correct Answer
verified
IP address-Each packet-filtering rule sp...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A software firewall can be combined with...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
DMZ
demili...
View Answer

Correct Answer
verified
Stateful packet filters keep a record of...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified