Network Security Module 9 - Test Questions

What are two benefits of implementing a firewall in a network? (Choose two.)

- A firewall will sanitize protocol flow - A firewall will reduce security management complexity

What are two characteristics of an application gateway firewall? (Choose two.)

- Analyzes traffic at Layers 3, 4, 5, and 7 of the OSI model - Performs most filtering and firewall control in software

Which three layers of the OSI model include information that is commonly inspected by a stateful firewall? (Choose three.)

- Layer 3 - Layer 4 - Layer 5

Which three statements describe trusted and untrusted areas of the network? (Choose three.)

- The public internet is generally considered untrusted - Internal networks, except the dmz, are considered trusted - In a ZPF network, traffic that moves within zones is generally considered trusted

Which two protocols are stateless and do not generate connection information needed to build a state table? (Choose two.)

- UDP - ICMP

When implementing a ZPF, which statement describes a zone?

A zone is a group of one or more interfaces that have similar functions or features.

Which network security design typically uses one inside interface, one outside interface, and one DMZ interface?

Demilitarized

What are two best practices when implementing firewall security policies?

Disable unnecessary network services

Which type of firewall is a PC or server with firewall software running on it?

Host-based

Which type of firewall is a combination of various firewall types?

Hybrid

What is one benefit of using a next-generation firewall rather than a stateful firewall?

Integrated use of an intrusion prevention system (IPS)

Which security design uses different types of firewalls and security measures that are combined at different areas of the network to add depth to the security of an organization ?

Layered Defense

Which type of firewall is part of a router firewall, permitting or denying traffic based on Layer 3 and Layer 4 information?

Packet Filtering

Which type of firewall is commonly part of a router firewall and allows or blocks traffic based on Layer 3 or 4 information?

Packet filtering firewall

Which type of firewall is supported by most routers and is the easiest to implement?

Packet filtering firewall

Which statement is a characteristic of a packet filtering firewall?

They are susceptible to IP spoofing

How does a firewall handle traffic that is originating from the DMZ network and traveling to a private network?

Traffic is usually blocked when it is origination from the DMZ network and traveling to a private network

Which type of firewall filters IP traffic between a pair of bridged interfaces?

Transparent

Which type of firewall generally has a low impact on network performance?

stateless firewall

Which type of firewall filters information at Layers 3, 4, 5, and 7 of the OSI reference model?

Application Gateway

Which type of traffic is usually blocked when implementing a demilitarized zone?

Traffic originating from the DMZ network and traveling to the private network.

Which network design groups interfaces into zones with similar functions or features?

ZPF