Question 1

ACLs filter packets by using a __________ base to determine whether to allow a packet to pass.

Accepted Answer

rule

Question 2

Which of the following is a typical drawback of a free firewall program?

Accepted Answer

A)   cannot monitor traffic in real time
B)   oversimplified configuration
C)   have centralized management
D)   more expensive than hardware firewalls

Question 3

What should a company concerned about protecting its data warehouses and employee privacy might consider installing on the network perimeter to prevent direct connections between the internal network and the Internet?

Accepted Answer

A)   router
B)   VPN server
C)   ICMP monitor
D)   proxy server D

Question 4

Which of the following is a method for supporting IPv6 on IPv4 networks until IPv6 is universally adopted?

Accepted Answer

A)   Teredo tunneling
B)   ICMPv6 encapsulation
C)   IPsec tunneling
D)   SMTP/S tunneling

Question 5

Which of the following is an advantage of hardware firewalls?

Accepted Answer

A)   not scalable compared to software firewalls
B)   not dependent on a conventional OS
C)   less expensive than software firewalls
D)   easy to patch

Question 6

MATCHING
-hardware or software configured to block unauthorized access to a network

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters B

Question 7

What is considered the 'cleanup rule' on a Cisco router?

Accepted Answer

A)   explicit allow all
B)   implicit deny all
C)   explicit prompt
D)   implicit allow

Question 8

A firewall can consist of all devices positioned on the network _____________.

Accepted Answer

The answer of A firewall can consist of all devices...

Question 9

What service uses UDP port 53?

Accepted Answer

A)   SMTP
B)   DNS
C)   ICMP
D)   TFTP

Question 10

Describe a firewall policy for application traffic.

Accepted Answer

A firewall policy is an addition to the ...

Question 11

Which two ports should packet-filtering rules address when establishing rules for Web access?

Accepted Answer

A)   143, 80
B)   25, 110
C)   80, 443
D)   423, 88

Question 12

Which of the following is a general practice for a rule base?

Accepted Answer

A)   begin by blocking all traffic and end by allowing selective services
B)   permit access to public servers in the DMZ
C)   allow all access to the firewall
D)   allow direct access from the Internet to computers behind the firewall

Question 13

What is a cleanup rule? Provide an example.

Accepted Answer

A cleanup rule handles any other packets...

Question 14

What makes an effective rule base? List three points to consider.

Accepted Answer

It should be based on the organization's...

Question 15

Firewalls can protect against employees copying confidential data from within the network.

Accepted Answer

A) True 
 B)False

Question 16

MATCHING
-software that forwards network packets and caches Web pages to speed up network performance

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Question 17

Generally,connections to instant-messaging ports are harmless and should be allowed.

Accepted Answer

A) True 
 B)False

Question 18

A primary objective of a rule base is to ______________ communications based on complex rules.

Accepted Answer

The answer of A primary objective of a rule base...

Question 19

Software firewalls are usually more scalable than hardware firewalls.

Accepted Answer

A) True 
 B)False

Question 20

MATCHING
-a packet-filtering rule that comes last in a rule base and covers any packets that have not been covered by preceding rules

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filters

Exam 9: Firewalls

ACLs filter packets by using a __________ base to determine whether to allow a packet to pass.

Correct Answerverifiedrule

Which of the following is a typical drawback of a free firewall program?

Correct AnswerverifiedShow Answer

What should a company concerned about protecting its data warehouses and employee privacy might consider installing on the network perimeter to prevent direct connections between the internal network and the Internet?

Correct AnswerverifiedD

Which of the following is a method for supporting IPv6 on IPv4 networks until IPv6 is universally adopted?

Correct AnswerverifiedShow Answer

Which of the following is an advantage of hardware firewalls?

Correct AnswerverifiedShow Answer

MATCHING -hardware or software configured to block unauthorized access to a network

Correct AnswerverifiedB

What is considered the 'cleanup rule' on a Cisco router?

Correct AnswerverifiedShow Answer

A firewall can consist of all devices positioned on the network _____________.

Correct AnswerverifiedShow Answer

What service uses UDP port 53?

Correct AnswerverifiedShow Answer

Describe a firewall policy for application traffic.

Correct AnswerverifiedA firewall policy is an addition to the ...View AnswerShow Answer

Which two ports should packet-filtering rules address when establishing rules for Web access?

Correct AnswerverifiedShow Answer

Which of the following is a general practice for a rule base?

Correct AnswerverifiedShow Answer

What is a cleanup rule? Provide an example.

Correct AnswerverifiedA cleanup rule handles any other packets...View AnswerShow Answer

What makes an effective rule base? List three points to consider.

Correct AnswerverifiedIt should be based on the organization's...View AnswerShow Answer

Firewalls can protect against employees copying confidential data from within the network.

Correct AnswerverifiedShow Answer

MATCHING -software that forwards network packets and caches Web pages to speed up network performance

Correct AnswerverifiedShow Answer

Generally,connections to instant-messaging ports are harmless and should be allowed.

Correct AnswerverifiedShow Answer

A primary objective of a rule base is to ______________ communications based on complex rules.

Correct AnswerverifiedShow Answer

Software firewalls are usually more scalable than hardware firewalls.

Correct AnswerverifiedShow Answer

MATCHING -a packet-filtering rule that comes last in a rule base and covers any packets that have not been covered by preceding rules

Correct AnswerverifiedShow Answer

Correct Answer
verified
rule

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A firewall policy is an addition to the ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A cleanup rule handles any other packets...
View Answer

Correct Answer
verified
It should be based on the organization's...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified