6.1.8 Practice Questions Test Out

Which of the following is true about a network-based firewall?

A network-based firewall is installed at the edge of a private network or network segment.

How does a proxy server differ from a packet-filtering firewall?

A proxy server operates at the Application layer, while a packet-filtering firewall operates at the Network layer. A proxy server is a device that stands as an intermediary between a secure private network and the public. A proxy server is an Application layer firewall that is capable of filtering by information contained within the data portion of a packet (at the Application layer).

Which of the following does the sudo iptables -F command accomplish?

Clears all the current rules. The sudo iptables -F command clears all the current rules. The sudo iptables -A INPUT -j DROP command drops all incoming traffic. The sudo iptables -L command lists all the current rules. The sudo /sbin/iptables-save command saves changes to iptables.

Which of the following chains is used for incoming connections that aren't delivered locally?

Forward Forward is a chain that's used for incoming connections that aren't delivered locally. An example is iptables used on a router. The traffic is not destined for the router, but the router forwards the traffic to the destination device.

Which of the following are true about reverse proxy? (Select two.)

Handles requests from the internet to a server on a private network., Can perform load balancing, authentication, and caching.

You have been given a laptop to use for work. You connect the laptop to your company network, use the laptop from home, and use it while traveling. You want to protect the laptop from internet-based attacks. Which solution should you use?

Host-based firewall A host-based firewall inspects traffic received by a host. Use a host-based firewall to protect your computer from attacks when there is no network-based firewall, such as when you connect to the internet from a public location.

Which options are you able to set on a firewall? (Select three.)

Packet source address, Port number, and Packet destination address. Firewalls allow you to set filters by source or destination IP address and port number. They do not filter by checksum, acknowledgement number, sequence number, or digital signature.

Based on the diagram, which type of proxy server is handling the client's request?

Reverse proxy server A reverse proxy server handles requests from the internet to an internal network. Instead of requests for a server going directly to the server, they first go to the reverse proxy server.

Which device combines multiple security features, such as anti-spam, load-balancing, and antivirus, into a single network appliance?

Unified Threat Management (UTM) A Unified Threat Management device combines multiple security features into a single network appliance. A single UTM device can provide several security features, including firewall, VPN, anti-spam, antivirus, and load balancing.

Which of the following is true about a firewall?

You must manually specify which traffic you want to allow through the firewall. Everything else is blocked. By default, most firewalls deny all traffic, which is called implicit deny. You must manually specify which traffic you want to allow through the firewall. Everything else is blocked.