Question 1

Antivirus servers can only find viruses, not other types of malware.

Accepted Answer

A) True 
 B)False

Question 2

In ________ filtering, the firewall filters packets when they are leaving the network.

Accepted Answer

A)  ingress 
B)  egress 
C)  Both A and B 
D)  Neither A nor B 
A)  ingress 
B)  egress 
C)  Both A and B 
D)  Neither A nor B

Question 3

There is(are) ________ NAT traversal method(s).

Accepted Answer

A)  1 
B)  2 
C)  7 
D)  several 
A)  1 
B)  2 
C)  7 
D)  several

Question 4

A connection designates a specific program designated by a port number on a specific computer's IP address.

Accepted Answer

A) True 
 B)False

Question 5

In ingress and egress filtering, an SPI firewall always considers its ACL rules when a new packet arrives that attempts to open a connection.

Accepted Answer

A) True 
 B)False

Question 6

An internal firewall sits at the boundary between the corporate site and the Internet.

Accepted Answer

A) True 
 B)False

Question 7

Half-open TCP SYN attacks can be stopped by many border firewalls.

Accepted Answer

A) True 
 B)False

Question 8

Application proxy firewalls can always examine application layer content.

Accepted Answer

A) True 
 B)False

Question 9

If a firewall cannot keep up with traffic volume, it will ________.

Accepted Answer

A)  continue passing all packets but slow operation 
B)  drop packets it cannot process 
C)  pass any packets it cannot filter 
D)  shut down, failing safely 
A)  continue passing all packets but slow operation 
B)  drop packets it cannot process 
C)  pass any packets it cannot filter 
D)  shut down, failing safely

Question 10

Most packets are part of the ________ state.

Accepted Answer

A)  connection opening 
B)  connection closing 
C)  Both A and B 
D)  Neither A nor B 
A)  connection opening 
B)  connection closing 
C)  Both A and B 
D)  Neither A nor B

Question 11

Bandwidth limitation for certain types of traffic is less risky than dropping packets.

Accepted Answer

A) True 
 B)False

Question 12

________ firewalls may be able to stop attacks by employees within the firm against internal site resources.

Accepted Answer

A)  Internal 
B)  External 
C)  UTM 
D)  Border 
A)  Internal 
B)  External 
C)  UTM 
D)  Border

Question 13

After an antivirus server performs filtering, it may ________.

Accepted Answer

A)  drop the object 
B)  send the object to the firewall to pass to the destination 
C)  pass the object to the destination directly 
D)  All of the above 
A)  drop the object 
B)  send the object to the firewall to pass to the destination 
C)  pass the object to the destination directly 
D)  All of the above

Question 14

A connection between two programs on different computers is represented by its ________.

Accepted Answer

A)  pair of IP addresses 
B)  pair of port numbers 
C)  pair of sockets 
D)  None of the above 
A)  pair of IP addresses 
B)  pair of port numbers 
C)  pair of sockets 
D)  None of the above

Question 15

SPI firewalls can handle both ICMP and UDP.

Accepted Answer

A) True 
 B)False

Question 16

The basic strategy of log file reading is to determine what traffic is usual.

Accepted Answer

A) True 
 B)False

Question 17

A socket designates a specific program designated by a port number on a specific computer's IP address.

Accepted Answer

A) True 
 B)False

Question 18

________ firewalls always examine application messages in depth.

Accepted Answer

A)  Static packet filtering 
B)  SPI 
C)  Application proxy 
D)  All of the above 
A)  Static packet filtering 
B)  SPI 
C)  Application proxy 
D)  All of the above

Question 19

Zero-day attacks might be stopped by ________ detection.

Accepted Answer

A)  signature 
B)  anomaly 
C)  Both A and B 
D)  Neither A nor B 
A)  signature 
B)  anomaly 
C)  Both A and B 
D)  Neither A nor B

Question 20

If a firewall receives a provable attack packet, the firewall will ________.

Accepted Answer

A)  log the packet 
B)  drop the packet 
C)  Both A and B 
D)  Neither A nor B 
A)  log the packet 
B)  drop the packet 
C)  Both A and B 
D)  Neither A nor B

Antivirus servers can only find viruses, not other types of malware.

In ________ filtering, the firewall filters packets when they are leaving the network.

There is(are) ________ NAT traversal method(s).

A connection designates a specific program designated by a port number on a specific computer's IP address.

In ingress and egress filtering, an SPI firewall always considers its ACL rules when a new packet arrives that attempts to open a connection.

An internal firewall sits at the boundary between the corporate site and the Internet.

Half-open TCP SYN attacks can be stopped by many border firewalls.

Application proxy firewalls can always examine application layer content.

If a firewall cannot keep up with traffic volume, it will ________.

Most packets are part of the ________ state.

Bandwidth limitation for certain types of traffic is less risky than dropping packets.

________ firewalls may be able to stop attacks by employees within the firm against internal site resources.

After an antivirus server performs filtering, it may ________.

A connection between two programs on different computers is represented by its ________.

SPI firewalls can handle both ICMP and UDP.

The basic strategy of log file reading is to determine what traffic is usual.

A socket designates a specific program designated by a port number on a specific computer's IP address.

________ firewalls always examine application messages in depth.

Zero-day attacks might be stopped by ________ detection.

If a firewall receives a provable attack packet, the firewall will ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 6: Firewalls

Antivirus servers can only find viruses, not other types of malware.

In ________ filtering, the firewall filters packets when they are leaving the network.

There is(are) ________ NAT traversal method(s).

A connection designates a specific program designated by a port number on a specific computer's IP address.

In ingress and egress filtering, an SPI firewall always considers its ACL rules when a new packet arrives that attempts to open a connection.

An internal firewall sits at the boundary between the corporate site and the Internet.

Half-open TCP SYN attacks can be stopped by many border firewalls.

Application proxy firewalls can always examine application layer content.

If a firewall cannot keep up with traffic volume, it will ________.

Most packets are part of the ________ state.

Bandwidth limitation for certain types of traffic is less risky than dropping packets.

________ firewalls may be able to stop attacks by employees within the firm against internal site resources.

After an antivirus server performs filtering, it may ________.

A connection between two programs on different computers is represented by its ________.

SPI firewalls can handle both ICMP and UDP.

The basic strategy of log file reading is to determine what traffic is usual.

A socket designates a specific program designated by a port number on a specific computer's IP address.

________ firewalls always examine application messages in depth.

Zero-day attacks might be stopped by ________ detection.

If a firewall receives a provable attack packet, the firewall will ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters