Deck 3: Fundamentals of Firewalls

Question 1

How can vulnerability to flooding attacks be reduced with an application gateway?

A)Authenticating users
B)External systems never see the gateway
C)Packets are continually checked during the connection
D)Vulnerability to flooding attacks with an application gateway cannot be mitigated

Answer 1

A

Question 2

Which type of firewall is included in Windows XP and many distributions of Linux operating systems?

A)Application proxy
B)Packet filter
C)Stateful packet inspection
D)User authentication

Answer 2

B

Question 3

At what OSI layer do packet filters function?

A)Physical layer
B)Data link layer
C)Network layer
D)Transport layer

Answer 3

C

Question 4

Identifying abnormal activity on a firewall requires that one establish a:

A)baseline
B)bastion host
C)proxy server
D)screened host

Question 5

Which is a term used to refer to the process of authentication and verification?

A)Connecting
B)Filtering
C)Negotiation
D)Screening

Question 6

A term used to refer to the process of authentication and verification as accomplished on some gateways is ____________.

Question 7

A firewall configuration using a server as a router and running multiple network interfaces with automatic routing disabled is an example of a:

A)dual-homed host
B)network host-based
C)router-based
D)screened host

Question 8

In comparing a packet filter firewall with a stateful packet inspection firewall (SPI),the SPI firewall is:

A)LESS susceptible to ping and SYN floods and LESS susceptible to IP spoofing.
B)LESS susceptible to ping and SYN floods but MORE susceptible to IP spoofing
C)MORE susceptible to ping and SYN floods and LESS susceptible to IP spoofing
D)MORE susceptible to ping and SYN floods and MORE susceptible to IP spoofing

Question 9

Which type of firewall negotiates between the server and client to permit or deny connection based on the type of software and connection requested?

A)Application gateway
B)Circuit level gateway
C)Packet filter
D)Stateful packet inspection

Question 10

Once a circuit level gateway verifies the user's logon,it creates a virtual circuit between:

A)the external server and the proxy server
B)the internal client and the proxy server
C)the internal client and the external server
D)the external server and the firewall

Question 11

A firewall that uses a combination of approaches rather than a single approach to protect the network is called:

A)dual-homed
B)hybrid
C)multi-homed
D)open source

Question 12

Using a server running the Linux operating system with its built-in firewall as the network firewall is one example of which firewall configuration?

A)dual-homed host
B)network host-based
C)router-based
D)screened host

Question 13

In a ____________ firewall configuration,each incoming packet is examined.

Question 14

An open source software circuit level gateway is available from which of the following?

A)Amrita Labs
B)SonicWALL
C)Teros
D)Watchguard Technologies

Question 15

Which firewall configuration would be appropriate within a network to separate and protect various subnets of a network to provide greater security?

A)bastion host
B)demilitarized zone
C)dual-homed host
D)router-based

Question 16

A standalone technology that hides internal addresses from the outside and only allows connections that originate from inside the network is called:

A)DMZ
B)HTTP
C)NAT
D)TFTP

Question 17

Which firewall denies or permits access based in part on data determined from previous packets in the conversation?

A)Application gateway
B)Circuit level gateway
C)Packet filter
D)Stateful packet inspection

Question 18

In many typical configurations with multiple firewalls,e-mail servers and FTP servers are located in the:

A)corporate Intranet
B)demilitarized zone
C)external network
D)internal corporate network

Question 19

Which type of firewall is generally the simplest and least expensive?

A)Application gateway
B)Circuit level gateway
C)Packet filter
D)Stateful packet inspection

Question 20

Which serves as a single contact point between the Internet and the private network?

A)Bastion host
B)DMZ
C)Dual-homed host
D)Screened host

Question 21

Although very similar to application gateways,_____________ are more secure and usually found on more expensive equipment.

Question 22

Taking security precautions such as keeping patches updated,uninstalling unneeded applications,closing unused ports,and turning off unused services is called ____________ the operating system.

Question 23

The stateful packet inspection (SPI)firewall is based on the ____________ firewall.

Question 24

A ____________ firewall solution is actually a combination of several different firewall systems in a single system.

Question 25

The first rule of firewalls dictates that to provide the best security,they not only must be installed properly,but they must also be ____________ properly.

Question 26

With a circuit level gateway in place,external users only see the IP address of the ____________.

Question 27

Establishing a(n)____________ upon initial setup and configuration of a firewall permits better identification of abnormal traffic versus normal traffic.