Question 1

Ingress ACL rules typically permit a specific type of externally originated connection to network resources.

Accepted Answer

A) True 
 B)False

Question 2

It is getting easier for attackers to bypass the border firewall.

Accepted Answer

A) True 
 B)False

Question 3

If a firewall has to drop packets because it cannot keep up with traffic volume, this is ________.

Accepted Answer

A)  good because it will prevent possible attack packets from entering the network 
B)  bad because valid, non-attack packets will be dropped and this will effectively created a self-generated DOS attack 
C)  Both A and B 
D)  Neither A nor B 
A)  good because it will prevent possible attack packets from entering the network 
B)  bad because valid, non-attack packets will be dropped and this will effectively created a self-generated DOS attack 
C)  Both A and B 
D)  Neither A nor B

Question 4

The ________ is a subnet that contains all of the servers and application proxy firewalls that must be accessible to the outside world.

Accepted Answer

A)  Internet subnet 
B)  server subnet 
C)  external subnet 
D)  None of the above 
A)  Internet subnet 
B)  server subnet 
C)  external subnet 
D)  None of the above

Question 5

A ________ attack is an attack that is made before attack signatures for the threat are defined.

Accepted Answer

A)  zero-day 
B)  vulnerability based 
C)  stealth 
D)  anomaly based 
A)  zero-day 
B)  vulnerability based 
C)  stealth 
D)  anomaly based

Question 6

A connection opening is a state.

Accepted Answer

A) True 
 B)False

Question 7

What is the SPI firewall rule for packets that do not attempt to open connections?

Accepted Answer

A)  Drop the packet unless it is permitted by an ACL 
B)  Pass the packet unless it is forbidden by an ACL 
C)  Pass the packet if it is part of a previously approved connection 
D)  Either A or B 
A)  Drop the packet unless it is permitted by an ACL 
B)  Pass the packet unless it is forbidden by an ACL 
C)  Pass the packet if it is part of a previously approved connection 
D)  Either A or B

Question 8

SPI firewalls can conduct ________ inspection.

Accepted Answer

A)  stateful packet 
B)  static packet filtering 
C)  Both A and B 
D)  Neither A nor B 
A)  stateful packet 
B)  static packet filtering 
C)  Both A and B 
D)  Neither A nor B

Question 9

________ detection looks at traffic patterns for deviations from set norms.

Accepted Answer

A)  Signature 
B)  Anomaly 
C)  Both A and B 
D)  Neither A nor B 
A)  Signature 
B)  Anomaly 
C)  Both A and B 
D)  Neither A nor B

Question 10

Firewalls will drop ________.

Accepted Answer

A)  suspicious packets 
B)  provable attack packets 
C)  Both A and B 
D)  Neither A nor B 
A)  suspicious packets 
B)  provable attack packets 
C)  Both A and B 
D)  Neither A nor B

Question 11

If a firewall receives a suspicious packet, the firewall will ________.

Accepted Answer

A)  log the packet 
B)  drop the packet 
C)  Both A and B 
D)  Neither A nor B 
A)  log the packet 
B)  drop the packet 
C)  Both A and B 
D)  Neither A nor B

Question 12

If an IPS identifies an attack, it can ________.

Accepted Answer

A)  drop the attack packet(s) 
B)  limit suspicious traffic to a certain percentage of the total bandwidth 
C)  Both A and B 
D)  Neither A nor B 
A)  drop the attack packet(s) 
B)  limit suspicious traffic to a certain percentage of the total bandwidth 
C)  Both A and B 
D)  Neither A nor B

Question 13

IDSs tend to issue many false negatives.

Accepted Answer

A) True 
 B)False

Question 14

Static packet filtering firewalls are limited to ________.

Accepted Answer

A)  inspecting packets for which there are good application proxy filtering rules 
B)  inspecting packets in isolation from their context 
C)  Both A and B 
D)  Neither A nor B 
A)  inspecting packets for which there are good application proxy filtering rules 
B)  inspecting packets in isolation from their context 
C)  Both A and B 
D)  Neither A nor B

Question 15

Automatic protections for application proxy firewalls include ________.

Accepted Answer

A)  protocol fidelity 
B)  header destruction 
C)  Both A and B 
D)  Neither A nor B 
A)  protocol fidelity 
B)  header destruction 
C)  Both A and B 
D)  Neither A nor B

Question 16

________ detection looks for specific patterns in the network traffic to identify a threat.

Accepted Answer

A)  Signature 
B)  Anomaly 
C)  Both A and B 
D)  Neither A nor B 
A)  Signature 
B)  Anomaly 
C)  Both A and B 
D)  Neither A nor B

Question 17

Static packet filtering is sometimes used ________.

Accepted Answer

A)  as a secondary filtering mechanism on an application proxy firewall 
B)  on border routers 
C)  Both A and B 
D)  Neither A nor B 
A)  as a secondary filtering mechanism on an application proxy firewall 
B)  on border routers 
C)  Both A and B 
D)  Neither A nor B

Question 18

IDSs need to filter individual packets rather than packet streams.

Accepted Answer

A) True 
 B)False

Question 19

A state is a distinct phase in a connection between two applications.

Accepted Answer

A) True 
 B)False

Question 20

Stateful packet inspection firewalls are ________.

Accepted Answer

A)  expensive 
B)  fairly safe in practice 
C)  Both A and B 
D)  Neither A nor B 
A)  expensive 
B)  fairly safe in practice 
C)  Both A and B 
D)  Neither A nor B

Ingress ACL rules typically permit a specific type of externally originated connection to network resources.

It is getting easier for attackers to bypass the border firewall.

If a firewall has to drop packets because it cannot keep up with traffic volume, this is ________.

The ________ is a subnet that contains all of the servers and application proxy firewalls that must be accessible to the outside world.

A ________ attack is an attack that is made before attack signatures for the threat are defined.

A connection opening is a state.

What is the SPI firewall rule for packets that do not attempt to open connections?

SPI firewalls can conduct ________ inspection.

________ detection looks at traffic patterns for deviations from set norms.

Firewalls will drop ________.

If a firewall receives a suspicious packet, the firewall will ________.

If an IPS identifies an attack, it can ________.

IDSs tend to issue many false negatives.

Static packet filtering firewalls are limited to ________.

Automatic protections for application proxy firewalls include ________.

________ detection looks for specific patterns in the network traffic to identify a threat.

Static packet filtering is sometimes used ________.

IDSs need to filter individual packets rather than packet streams.

A state is a distinct phase in a connection between two applications.

Stateful packet inspection firewalls are ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 6: Firewalls

Ingress ACL rules typically permit a specific type of externally originated connection to network resources.

It is getting easier for attackers to bypass the border firewall.

If a firewall has to drop packets because it cannot keep up with traffic volume, this is ________.

The ________ is a subnet that contains all of the servers and application proxy firewalls that must be accessible to the outside world.

A ________ attack is an attack that is made before attack signatures for the threat are defined.

A connection opening is a state.

What is the SPI firewall rule for packets that do not attempt to open connections?

SPI firewalls can conduct ________ inspection.

________ detection looks at traffic patterns for deviations from set norms.

Firewalls will drop ________.

If a firewall receives a suspicious packet, the firewall will ________.

If an IPS identifies an attack, it can ________.

IDSs tend to issue many false negatives.

Static packet filtering firewalls are limited to ________.

Automatic protections for application proxy firewalls include ________.

________ detection looks for specific patterns in the network traffic to identify a threat.

Static packet filtering is sometimes used ________.

IDSs need to filter individual packets rather than packet streams.

A state is a distinct phase in a connection between two applications.

Stateful packet inspection firewalls are ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters