Question 1

Why is creating firewall policies desirable compared to just creating a list of ACL rules?

Accepted Answer

A)  Policies are more specific. 
B)  Policies are easier to understand. 
C)  Both A and B 
D)  Neither A nor B 
A)  Policies are more specific. 
B)  Policies are easier to understand. 
C)  Both A and B 
D)  Neither A nor B

Question 2

A router that connects to three subnets is called a ________ router.

Accepted Answer

A)  border 
B)  internal 
C)  application proxy 
D)  None of the above 
A)  border 
B)  internal 
C)  application proxy 
D)  None of the above

Question 3

A border firewall sits at the boundary between the corporate site and the external Internet.

Accepted Answer

A) True 
 B)False

Question 4

The NAT firewall places only the internal socket in the translation table.

Accepted Answer

A) True 
 B)False

Question 5

An application proxy firewall needs have multiple proxy programs if it is to filter multiple application protocols.

Accepted Answer

A) True 
 B)False

Question 6

In a firewall policy database, the source field and destination field are fairly explanatory.

Accepted Answer

A) True 
 B)False

Question 7

Ingress ACL rules typically permit a specific type of internally originated connection to outside resources.

Accepted Answer

A) True 
 B)False

Question 8

Main border firewalls rarely use stateful packet inspection.

Accepted Answer

A) True 
 B)False

Question 9

The purpose of egress firewall filtering is to stop attack packets from entering the firm's internal network.

Accepted Answer

A) True 
 B)False

Question 10

Firewall appliances need little or no hardening before they are installed.

Accepted Answer

A) True 
 B)False

Question 11

What type of host may be placed in the DMZ?

Accepted Answer

A)  Public webservers 
B)  Eternal DNS servers 
C)  Both A and B 
D)  Neither A nor B 
A)  Public webservers 
B)  Eternal DNS servers 
C)  Both A and B 
D)  Neither A nor B

Question 12

The combination of high safety and low cost makes SPI firewalls extremely popular.

Accepted Answer

A) True 
 B)False

Question 13

The most time-consuming part of firewall management is ________.

Accepted Answer

A)  creating ACLs 
B)  creating policies 
C)  reading firewall logs 
D)  None of the above 
A)  creating ACLs 
B)  creating policies 
C)  reading firewall logs 
D)  None of the above

Question 14

Most firewall database policies include less than 5 rules.

Accepted Answer

A) True 
 B)False

Question 15

Wire speed is the maximum speed at which a firewall can filter packets.

Accepted Answer

A) True 
 B)False

Question 16

NAT is able to stop ________.

Accepted Answer

A)  scanning probes 
B)  sniffers from learning anything about the internal IP address of internal hosts 
C)  Both A and B 
D)  Neither A nor B 
A)  scanning probes 
B)  sniffers from learning anything about the internal IP address of internal hosts 
C)  Both A and B 
D)  Neither A nor B

Question 17

Reading firewall logs requires limited time in firewall administration.

Accepted Answer

A) True 
 B)False

Question 18

Both TCP and UDP can be used by an application .

Accepted Answer

A) True 
 B)False

Question 19

Stateful packet inspection firewalls use relay operation with two connections per client/server pair.

Accepted Answer

A) True 
 B)False

Question 20

Which IPS response to an attack is the most effective in stopping attacks?

Accepted Answer

A)  Dropping packets 
B)  Limiting suspicious traffic to a certain percentage of the total bandwidth 
C)  Both A and B are equally effective 
D)  Neither A nor B 
A)  Dropping packets 
B)  Limiting suspicious traffic to a certain percentage of the total bandwidth 
C)  Both A and B are equally effective 
D)  Neither A nor B

Why is creating firewall policies desirable compared to just creating a list of ACL rules?

A router that connects to three subnets is called a ________ router.

A border firewall sits at the boundary between the corporate site and the external Internet.

The NAT firewall places only the internal socket in the translation table.

An application proxy firewall needs have multiple proxy programs if it is to filter multiple application protocols.

In a firewall policy database, the source field and destination field are fairly explanatory.

Ingress ACL rules typically permit a specific type of internally originated connection to outside resources.

Main border firewalls rarely use stateful packet inspection.

The purpose of egress firewall filtering is to stop attack packets from entering the firm's internal network.

Firewall appliances need little or no hardening before they are installed.

What type of host may be placed in the DMZ?

The combination of high safety and low cost makes SPI firewalls extremely popular.

The most time-consuming part of firewall management is ________.

Most firewall database policies include less than 5 rules.

Wire speed is the maximum speed at which a firewall can filter packets.

NAT is able to stop ________.

Reading firewall logs requires limited time in firewall administration.

Both TCP and UDP can be used by an application .

Stateful packet inspection firewalls use relay operation with two connections per client/server pair.

Which IPS response to an attack is the most effective in stopping attacks?

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 6: Firewalls

Why is creating firewall policies desirable compared to just creating a list of ACL rules?

A router that connects to three subnets is called a ________ router.

A border firewall sits at the boundary between the corporate site and the external Internet.

The NAT firewall places only the internal socket in the translation table.

An application proxy firewall needs have multiple proxy programs if it is to filter multiple application protocols.

In a firewall policy database, the source field and destination field are fairly explanatory.

Ingress ACL rules typically permit a specific type of internally originated connection to outside resources.

Main border firewalls rarely use stateful packet inspection.

The purpose of egress firewall filtering is to stop attack packets from entering the firm's internal network.

Firewall appliances need little or no hardening before they are installed.

What type of host may be placed in the DMZ?

The combination of high safety and low cost makes SPI firewalls extremely popular.

The most time-consuming part of firewall management is ________.

Most firewall database policies include less than 5 rules.

Wire speed is the maximum speed at which a firewall can filter packets.

NAT is able to stop ________.

Reading firewall logs requires limited time in firewall administration.

Both TCP and UDP can be used by an application .

Stateful packet inspection firewalls use relay operation with two connections per client/server pair.

Which IPS response to an attack is the most effective in stopping attacks?

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters