Question 1

One advantage of a packet filtering firewall is its simplicity.

Accepted Answer

Packet filtering firewalls operate at the network level and make decisions based on the source and destination addresses, protocol, and ports, which makes them simpler to configure and manage compared to more complex firewall types like stateful inspection or application layer firewalls.

Question 2

Packet filters tend to be more secure than application level gateways.

Accepted Answer

Application level gateways, also known as proxy servers, inspect the data being transferred at the application layer, offering a higher level of security by filtering specific content, commands, and functions, whereas packet filters operate at a lower level, inspecting packets at the network or transport layer without understanding the application data, making them less secure in comparison.

Question 3

A _________ firewall applies a set of rules to each incoming and outgoing IP packet and then forwards or discards the packet.
A)host-based
B)packet filtering
C)distributed
D)stateful inspection

Accepted Answer

Packet filtering firewalls work by applying a set of rules to each incoming and outgoing IP packet. They then make a decision to forward or discard the packet based on these rules. This type of firewall operates at the network level.

Question 4

The packet filter is typically set up as a list of rules based on matches to fields in the IP or TCP header.

Accepted Answer

Packet filters work by inspecting the headers of packets (both IP and TCP/UDP) against a set of rules defined by the administrator to decide whether to allow or block the traffic.

Question 5

A firewall may not act as a packet filter.

Accepted Answer

A firewall's primary function is to act as a packet filter, by examining network traffic and deciding whether to allow or block it based on a set of predefined rules. While a firewall may have additional features such as intrusion detection or VPN capabilities, its packet filtering function is fundamental to its purpose.

Question 6

_________ can be an effective means of protecting a local system or network of systems from network based security threats while at the same time affording access to the outside world via wide area networks and the Internet.

Accepted Answer

The answer of _________ can be an effective means of...

Question 7

The firewall cannot fully protect against internal threats.

Accepted Answer

Firewalls are primarily designed to protect against external threats by controlling incoming and outgoing network traffic based on an applied rule set. They are less effective against internal threats, such as malicious insiders or compromised systems within the network, because these threats originate from within the organization's own network perimeter.

Question 8

Firewall functionality can also be implemented as a software module in a router or LAN switch.

Accepted Answer

Firewalls can be implemented in both hardware and software, and it's common for routers and LAN switches to include software modules that provide firewall functionalities, controlling and filtering incoming and outgoing network traffic based on predetermined security rules.

Question 9

A circuit level proxy can be a stand alone system or it can be a specialized function performed by an application level gateway for certain applications.

Accepted Answer

A circuit level proxy can indeed operate as a standalone system designed to manage generic traffic at the session layer, or it can be integrated into an application level gateway, where it provides specialized session-layer services for specific applications, enhancing security and control.

Question 10

The _________ is the transport level port number which defines applications such as SNMP or TELNET.
A)Source IP address
B)IP protocol field
C)Source and destination transport level address
D)Interface

Accepted Answer

The transport level port number, which defines applications such as SNMP or TELNET, is referred to as the source and destination transport level address. These port numbers are crucial for directing traffic to the correct application on a device.

Question 11

The _________ is the address of the system that originated the IP packet.
A)Interface
B)Source and destination transport level address
C)IP protocol field
D)Source IP address

Accepted Answer

The source IP address in an IP packet specifies the address of the system that originated the packet.

Question 12

A stateful packet inspection firewall reviews the same packet information as a packet filtering firewall but also records information about TCP connections.

Accepted Answer

A stateful packet inspection (SPI) firewall not only examines the header information like source and destination IP addresses, port numbers, and packet type (similar to what a packet filtering firewall does) but also keeps track of the state of active connections (e.g., TCP connection establishment and tear-down) and makes decisions based on the context of the packets within those connections.

Question 13

A firewall may be designed to operate as a filter at the level of IP packets or may operate at a higher protocol layer.

Accepted Answer

Firewalls can operate at different layers of the OSI model, including filtering IP packets at the network layer or operating at higher layers to filter based on protocols, applications, or session information.

Question 14

An example of application level gateway implementation is the SOCKS package.

Accepted Answer

The answer of An example of application level gateway implementation...

Question 15

Packet filter firewalls examine upper layer data therefore they can prevent attacks that employ application specific vulnerabilities or functions.

Accepted Answer

Packet filter firewalls operate at the network layer and primarily inspect packet headers, not the payload or upper layer data, so they cannot prevent attacks targeting application-specific vulnerabilities.

Question 16

The technique that controls how particular services are used is the _________ control.The firewall may filter e-mail to eliminate spam, or it may enable external access to only a portion of the information on a local Web server.
A)direction
B)user
C)behavior
D)service

Accepted Answer

The answer of The technique that controls how particular services...

Question 17

The external firewall adds more stringent filtering capability in order to protect enterprise servers and workstations from external attack.

Accepted Answer

The answer of The external firewall adds more stringent filtering...

Question 18

Due to the small number of variables used in access control decisions packet filter firewalls are susceptible to security breaches caused by improper configurations.

Accepted Answer

Packet filter firewalls make decisions based on a small set of variables such as IP addresses, port numbers, and protocols, which can lead to security breaches if not configured with precise and comprehensive rules.

Question 19

The direction control determines the types of Internet services that can be accessed, inbound or outbound.

Accepted Answer

Direction control in networking typically refers to the control of data flow direction (inbound or outbound) rather than determining the types of Internet services that can be accessed. Access control lists (ACLs) or firewall rules are more directly responsible for controlling access to specific types of Internet services.

Question 20

The primary role of the personal firewall is to deny unauthorized remote access to the computer.
A)VPNs
B)Proxys
C)Firewalls
D)SOCKS

Accepted Answer

C) Firewalls are designed to prevent unauthorized access to or from a private network, which includes denying unauthorized remote access to a computer, making them the correct answer.

Quiz 12: Firewalls