Question 1

If a firewall receives a packet that is suspicious, it will drop and log the packet.

Accepted Answer

A) True 
 B)False

Question 2

The last egress ACL rule in a border firewall is DENY ALL.

Accepted Answer

A) True 
 B)False

Question 3

What type of filtering do IDSs do?

Accepted Answer

A)  Packet stream analysis 
B)  SPI filtering 
C)  Both A and B 
D)  Neither A nor B 
A)  Packet stream analysis 
B)  SPI filtering 
C)  Both A and B 
D)  Neither A nor B

Question 4

What time of filtering do UTM firewalls provide?

Accepted Answer

A)  IDS Service 
B)  Antivirus filtering 
C)  Both A and B 
D)  Neither A nor B 
A)  IDS Service 
B)  Antivirus filtering 
C)  Both A and B 
D)  Neither A nor B

Question 5

Stateful packet inspection firewalls ________.

Accepted Answer

A)  always do application content filtering 
B)  have the slow speed of relay operation 
C)  Both A and B 
D)  Neither A nor B 
A)  always do application content filtering 
B)  have the slow speed of relay operation 
C)  Both A and B 
D)  Neither A nor B

Question 6

________ drop packets.

Accepted Answer

A)  IDSs 
B)  IPSs 
C)  Both A and B 
D)  Neither A nor B 
A)  IDSs 
B)  IPSs 
C)  Both A and B 
D)  Neither A nor B

Question 7

Companies can nearly always stop DoS attacks without assistance from ISPs and other upstream agencies.

Accepted Answer

A) True 
 B)False

Question 8

Almost all main border firewalls use ________ filtering as their primary filtering mechanism.

Accepted Answer

A)  unified threat management 
B)  application proxy 
C)  static packet filtering 
D)  None of the above 
A)  unified threat management 
B)  application proxy 
C)  static packet filtering 
D)  None of the above

Question 9

A ________ firewall handling all traditional firewall functions (SPI, ACLs, etc.) as well as additional security functions such as antivirus filtering, spam filtering, application proxy filtering, and so forth.

Accepted Answer

A)  unified threat management 
B)  stateful packet inspection 
C)  static packet inspection 
D)  None of the above 
A)  unified threat management 
B)  stateful packet inspection 
C)  static packet inspection 
D)  None of the above

Question 10

________ firewalls filter traffic passing between different parts of a site's network.

Accepted Answer

A)  Border 
B)  Internal 
C)  Intermediate 
D)  None of the above 
A)  Border 
B)  Internal 
C)  Intermediate 
D)  None of the above

Question 11

If you will proxy four different applications, how many proxy programs will you need?

Accepted Answer

A)  1 
B)  2 
C)  4 
D)  8 
A)  1 
B)  2 
C)  4 
D)  8

Question 12

The firewall should go through vulnerability testing after each change.

Accepted Answer

A) True 
 B)False

Question 13

Firms can address the increasing ability of attackers to bypass the border firewalls by ________.

Accepted Answer

A)  hardening hosts 
B)  having multiple border firewalls 
C)  Both A and B 
D)  Neither A nor B 
A)  hardening hosts 
B)  having multiple border firewalls 
C)  Both A and B 
D)  Neither A nor B

Question 14

Today, application proxy firewalls are commonly used ________.

Accepted Answer

A)  to protect internal clients from malicious external servers 
B)  as main border firewalls 
C)  Both A and B 
D)  Neither A nor B 
A)  to protect internal clients from malicious external servers 
B)  as main border firewalls 
C)  Both A and B 
D)  Neither A nor B

Question 15

________ drop packets.

Accepted Answer

A)  Firewalls 
B)  IDSs 
C)  Both A and B 
D)  Neither A nor B 
A)  Firewalls 
B)  IDSs 
C)  Both A and B 
D)  Neither A nor B

Question 16

Nearly all main border walls today use ________ filtering.

Accepted Answer

A)  unified threat management 
B)  stateful packet inspection 
C)  static packet inspection 
D)  All of the above 
A)  unified threat management 
B)  stateful packet inspection 
C)  static packet inspection 
D)  All of the above

Question 17

What type of filtering do IDSs do?

Accepted Answer

A)  Deep packet inspection 
B)  SPI filtering 
C)  Both A and B 
D)  Neither A nor B 
A)  Deep packet inspection 
B)  SPI filtering 
C)  Both A and B 
D)  Neither A nor B

Question 18

In ________ filtering, the firewall examines packets entering the network from the outside.

Accepted Answer

A)  ingress 
B)  egress 
C)  Both A and B 
D)  Neither A nor B 
A)  ingress 
B)  egress 
C)  Both A and B 
D)  Neither A nor B

Question 19

It is easier to create appropriate ACL rules for server host firewalls than for border firewalls.

Accepted Answer

A) True 
 B)False

Question 20

IDSs drop packets that are merely suspicious.

Accepted Answer

A) True 
 B)False

If a firewall receives a packet that is suspicious, it will drop and log the packet.

The last egress ACL rule in a border firewall is DENY ALL.

What type of filtering do IDSs do?

What time of filtering do UTM firewalls provide?

Stateful packet inspection firewalls ________.

________ drop packets.

Companies can nearly always stop DoS attacks without assistance from ISPs and other upstream agencies.

Almost all main border firewalls use ________ filtering as their primary filtering mechanism.

A ________ firewall handling all traditional firewall functions (SPI, ACLs, etc.) as well as additional security functions such as antivirus filtering, spam filtering, application proxy filtering, and so forth.

________ firewalls filter traffic passing between different parts of a site's network.

If you will proxy four different applications, how many proxy programs will you need?

The firewall should go through vulnerability testing after each change.

Firms can address the increasing ability of attackers to bypass the border firewalls by ________.

Today, application proxy firewalls are commonly used ________.

________ drop packets.

Nearly all main border walls today use ________ filtering.

What type of filtering do IDSs do?

In ________ filtering, the firewall examines packets entering the network from the outside.

It is easier to create appropriate ACL rules for server host firewalls than for border firewalls.

IDSs drop packets that are merely suspicious.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 6: Firewalls

If a firewall receives a packet that is suspicious, it will drop and log the packet.

The last egress ACL rule in a border firewall is DENY ALL.

What type of filtering do IDSs do?

What time of filtering do UTM firewalls provide?

Stateful packet inspection firewalls ________.

________ drop packets.

Companies can nearly always stop DoS attacks without assistance from ISPs and other upstream agencies.

Almost all main border firewalls use ________ filtering as their primary filtering mechanism.

A ________ firewall handling all traditional firewall functions (SPI, ACLs, etc.) as well as additional security functions such as antivirus filtering, spam filtering, application proxy filtering, and so forth.

________ firewalls filter traffic passing between different parts of a site's network.

If you will proxy four different applications, how many proxy programs will you need?

The firewall should go through vulnerability testing after each change.

Firms can address the increasing ability of attackers to bypass the border firewalls by ________.

Today, application proxy firewalls are commonly used ________.

________ drop packets.

Nearly all main border walls today use ________ filtering.

What type of filtering do IDSs do?

In ________ filtering, the firewall examines packets entering the network from the outside.

It is easier to create appropriate ACL rules for server host firewalls than for border firewalls.

IDSs drop packets that are merely suspicious.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters